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Preface 


The OpenVMS System Management Utilities Reference Manual: A-—L contains 
reference information about the utilities that are used to manage both the 
OpenVMS VAX and OpenVMS AXP operating systems. This manual describes 
each system management utility and provides examples for frequently used 
commands and qualifiers. In addition to system management utilities, a 
description and usage summary of the AUTOGEN command procedure is 
presented in this reference manual. 


Refer to the OpenVMS System Management Utilities Reference Manual: M-Z for 
information on the system management utilities not discussed in this book. 


All commands follow the standard rules of grammar as specified in the OpenVMS 
DCL Dictionary. 


For information on how to use these system management utilities and 
AUTOGEN, please refer to the OpenVMS System Manager’s Manual. 


Intended Audience 


This manual is intended for system managers and users of the system 
management utilities for the OpenVMS VAX and OpenVMS AXP operating 
systems. 


Document Structure 


This manual is divided into 12 parts, which are arranged alphabetically. Each 

part, with the exception of the section on the AUTOGEN command procedure, 

contains reference information for a system management utility. Table 1 shows 
the structure as follows: 


Table 1 Manual Structure 
Part Utility 


Access Control List Editor (ACL editor) 

Accounting (ACCOUNTING) 

Analyze Disk/Disk Structure (ANALYZE/DISK_STRUCTURE) 
Audit Analysis (ANALYZE/AUDIT) 

Authorize (AUTHORIZE) 

AUTOGEN Command Procedure 

Backup (BACKUP) 

Crash Log Utility Extractor (CLUE) 


onrna»#rkrk WwW bdo 


(continued on next page) 


XV 


Table 1 (Cont.) Manual Structure 


Part Utility 

9 Error Log (ERROR LOG) 

10 Install (INSTALL) 

11 LAT Control Program (LATCP) 

12 Log Manager Control Program (LMCP) 


Associated Documents 


For more information on the system management utilities, please refer to the 
following documents: 


¢ DEC Text Processing Utility Reference Manual 

¢ OpenVMS AXP Guide to System Security 

¢ OpenVMS DCL Dictionary 

e OpenVMS System Manager’s Manual 

¢ OpenVMS System Management Utilities Reference Manual: M-Z 
¢ OpenVMS Programming Concepts Manual 

¢ OpenVMS Programming Interfaces: Calling a System Routine 
© OpenVMS Record Management Services Reference Manual 

¢ OpenVMS System Services Reference Manual 

¢ OpenVMS User’s Manual 

¢ OpenVMS VAX Device Support Manual 

¢ OpenVMS VAX Guide to System Security 

¢ OpenVMS VAX System Dump Analyzer Utility Manual 

¢ Volume Shadowing for OpenVMS 

e VAX Hardware Handbook 


Conventions 
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In this manual, every use of OpenVMS AXP means the OpenVMS AXP operating 
system, every use of OpenVMS VAX means the OpenVMS VAX operating system, 
and every use of OpenVMS means both the OpenVMS AXP operating system and 
the OpenVMS VAX operating system. 


The contents of the display examples for certain utility commands described 
in this manual may differ slightly from the actual output provided by these 
commands on your system. However, when the behavior of a command differs 
significantly between OpenVMS VAX and OpenVMS AXP, that behavior is 
described in text and rendered, as appropriate, in separate examples. 


The following conventions are used to identify information specific to OpenVMS 
AXP or to OpenVMS VAX: 


AXP 


<> 


The AXP icon denotes the beginning of information 
specific to OpenVMS AXP. 


The VAX icon denotes the beginning of information 
specific to OpenVMS VAX. 


The diamond symbol denotes the end of a section of 
information specific to OpenVMS AXP or to OpenVMS 
VAX. 


The following conventions are also used in this manual: 


Ctrl/x 


PF1 x 


GOLD x 


A sequence such as Ctrl/x indicates that you must hold down 
the key labeled Ctrl while you press another key or a pointing 
device button. 


A sequence such as PF1 x indicates that you must first press 
and release the key labeled PF1, then press and release 
another key or a pointing device button. 


A sequence such as GOLD «x indicates that you must first press 
and release the key defined GOLD, then press and release 
another key. GOLD key sequences can also have a slash (/), 
dash (-), or underscore (_) as a delimiter in EVE commands. 


In examples, a key name enclosed in a box indicates that 
you press a key on the keyboard. (In text, a key name is not 
enclosed in a box.) 


A horizontal ellipsis in examples indicates one of the following 
possibilities: 


e Additional optional arguments in a statement have been 
omitted. 


e The preceding item or items can be repeated one or more 
times. 


e Additional parameters, values, or other information can be 
entered. 


A vertical ellipsis indicates the omission of items from a code 
example or command format; the items are omitted because 
they are not important to the topic being discussed. 


In format descriptions, parentheses indicate that, if you 
choose more than one option, you must enclose the choices 
in parentheses. 


In format descriptions, brackets indicate optional elements. 
You can choose one, none, or all of the options. (Brackets are 
not optional, however, in the syntax of a directory name in 
an OpenVMS file specification, or in the syntax of a substring 
specification in an assignment statement.) 


In format descriptions, braces surround a required choice of 
options; you must choose one of the options listed. 
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boldface text 


italic text 


UPPERCASE TEXT 


numbers 


Boldface text represents the introduction of a new term or the 
name of an argument, an attribute, or a reason. 


Boldface text is also used to show user input in Bookreader 
versions of the manual. 


Italic text emphasizes important information, indicates 
variables, and indicates complete titles of manuals. Italic 
text also represents information that can vary in system 
messages (for example, Internal error number), command lines 
(for example, /PRODUCER=name), and command parameters 
in text. 


Uppercase text indicates a command, the name of a routine, 
the name of a file, or the abbreviation for a system privilege. 


A hyphen in code examples indicates that additional 
arguments to the request are provided on the line that follows. 


All numbers in text are assumed to be decimal, unless 
otherwise noted. Nondecimal radixes—binary, octal, or 
hexadecimal—are explicitly indicated. 
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Access Control List Editor 


ACL Editor Description 


The access control list editor (ACL editor) is a screen-oriented editor used to 
create and maintain access control lists (ACLs). An ACL is a collection of access 
control entries (ACEs) that grant or deny access for specific users or groups of 
users of an object. (For a description of the entry and display format for ACEs, 
see the section ACE Formats.) ACLs enable you to control access more closely 
than you can by using the default user identification code (UIC) based protection. 


The system does not limit the number of ACEs that an ACL can contain or the 
number of characters in an ACE. However, long ACLs increase the amount of 
time necessary to gain access to an object. In practice, memory constraints can 
limit the size of an ACL. 


The order of ACEs in an ACL is important. ACEs granting or denying access to 
an object for specific users must appear before ACEs identifying broader classes 
of users. For example, to grant user SMITH read access to a system object and to 
deny all other interactive users all types of access to the object, place the ACE for 
user SMITH before the ACE identifying all interactive users on the system. 


You can place ACLs on the following object classes: 


Capability (VAX only) 
Device 

Common event flag cluster (VAX only) 
File 

Group global section 

Logical name table 

Queue 

Resource domain (VAX only) 
Security class (VAX only) 
System global section 
Volume (VAX only) 


ACL Editor Usage Summary 


Format 


The access control list editor (ACL editor) creates or modifies an access control 
list (ACL) for a specified object. 


EDIT/ACL object-spec 


Parameter 

object-spec 

Specifies the object whose access control list is to be created or edited. If an 
access control list does not exist, it is created. 


You can specify an object from any of the following object classes: 


Capability (VAX only) 
Device 

Common event flag cluster (VAX only) 
File 

Group global section 

Logical name table 

Queue 

Resource domain (VAX only) 
Security class (VAX only) 
System global section 
Volume (VAX only) 


The default object class is a file. A file must be a disk file on a Files—11 On-Disk 
Structure Level 2 formatted volume. For any object other than a file, you must 
specify the object class with the /CLASS qualifier (VAX systems only) or with the 
/OBJECT_TYPE qualifier. 


Note that the ACL editor does not provide a default file type for files. To prevent 
the ACL editor from using a null file type, specify the file type on the command 
line. If the object is a directory, specify the .DIR file type. 


Do not include wildcard characters in the object specification. 


Usage Summary 
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You can invoke the ACL editor to create or modify an ACL for an object that you 
own, have control access to, or can gain access to by a privilege such as BYPASS, 
GRPPRV, READALL (AXP only), or SYSPRV. To invoke the ACL editor, enter 
the DCL command EDIT/ACL. In the command line, specify the name of the 
object whose ACL you want to edit. For example, to create an ACL for the file 
INVENTORY.DAT, enter the following command: 


$ EDIT/ACL INVENTORY . DAT 


ACL Editor Usage Summary 


On VAX systems, you can use either the EDIT/ACL command or the SET 
SECURITY/EDIT command to invoke the ACL editor. For more information on 
the SET SECURITY command, see the Security Guide.¢ 


By default, the ACL editor creates and modifies ACLs for files. To create an ACL 
for an object other than a file (for example, to create an ACL for a queue), you 
must specify the object class when you invoke the ACL editor. For example, the 
following command invokes the ACL editor to create an ACL for the disk DAPR: 


$ EDIT/ACL/OBJECT_TYPE=DEVICE DAPR 


On OpenVMS VAX systems, the equivalent SET SECURITY command is as 
follows: 


$ SET SECURITY/EDIT/CLASS=DEVICE DAPR 


If an ACL for the object you specify already exists, the ACL editor displays the 
ACL. You can then use keypad editing commands to add, replace, or delete one or 
more ACHs in the ACL (see Section A.1) To exit from a completed editing session, 
press Ctrl/Z. To end an editing session without incorporating any of your edits, 
press the GOLD key (PF1) and then press Ctrl/Z. 


For a description of keypad editing commands supplied by the ACL editor, see 
Appendix A. For information on how to modify the ACL editor by modifying ACL 
section files, see Appendix B. 


Note 


In addition to invoking the ACL editor directly or by entering commands 
at the DCL prompt ($), you can also modify an ACL by using the 
callable interface to the ACL editor (the ACLEDIT$EDIT routine). For 
information about how to use the ACLEDIT$EDIT routine, see the 
OpenVMS Utility Routines Manual. 


ACL Editor 


ACE Formats 


Alarm ACE 


<i> 


Format 


Parameters 
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This section describes the entry and display format for the following access 
control entries (ACEs): 


e Alarm ACE for security auditing of an object 
e Audit ACE for security auditing of an object (VAX only) 


e Creator ACE to set the ownership access for new files created in a directory 
(VAX only) 


° Default Protection ACE to set a default protection code through a directory 
structure 


e Identifier ACE for object access control 
e Subsystem ACE for protected subsystem access control (VAX only) 


The Security Guide describes how to use each of these ACEs. You can also use 
other types of ACEs. For example, applications can use an Application ACE to 
store application-specific information associated with a file. For a description 
of the internal format used to store an ACE, see the OpenVMS Programming 
Concepts Manual. 


Specifies the access criteria that cause an alarm message to be sent to all security 
operator terminals. On AXP systems, alarm messages are also sent to the system 
security audit log file. A message is sent only if ACL alarms are enabled with the 
DCL command SET AUDIT/ALARM/ENABLE=ACL. 


On VAX systems, ACL alarms are enabled by default; however, alarms are not 
written to the system security audit log file. If you have existing files protected 
by Alarm ACEs and you want messages to be recorded in the log file, replace the 
Alarm ACEs with Audit ACEs. 


(ALARM=SECURITY [,OPTIONS=attributes], ACCESS=access-type[+access-type...]) 


options 
Specify any of the following attributes: 
Default Indicates that an ACE is to be included in the ACL of 


any files created within a directory. When the entry is 
propagated, the Default attribute is removed from the ACE 
of the created file. This attribute is valid for directory files 
only. 


Hidden 


Protected 


ACL Editor 
Alarm ACE 


Indicates that this ACE should be changed only by the 
application that adds it. Although the Hidden attribute 

is valid for any ACE type, its intended use is to hide 
Application ACEs. The ACL editor displays the ACE 

only to show its relative position within the ACL, not 

to facilitate editing of the ACE. Unless you have the 
SECURITY privilege, you cannot display a hidden ACE 
with the DCL command DIRECTORY/ACL. 

On OpenVMS AXP systems, you cannot modify or delete a 
hidden ACE with the DCL command SET ACL. To create a 
hidden ACE, an application can invoke the $CHANGE_ACL 
system service. 

On OpenVMS VAX systems, you cannot display a hidden 
ACE with the DCL commands SHOW SECURITY, SHOW 
ACL, or DIRECTORY/SECURITY, and you cannot modify or 
delete a hidden ACE with the SET SECURITY command. 
To create a hidden ACH, an application can invoke the 
$SET_SECURITY system service. 


Protects the ACE against casual deletion. Protected ACEs 
can be deleted only in the following ways: 


e By using the ACL editor 


e By specifying the ACE explicitly when deleting it 
On OpenVMS AXP systems, use the DCL command 
SET ACL/ACL=(ace)/DELETE to specify and delete an 
ACE. 
On OpenVMS VAX systems, use the command SET 
SECURITY/ACL=(ace)/DELETE to specify and delete 
an ACE. 


e By deleting all ACEs, both protected and unprotected 
On OpenVMS AXP systems, use the DCL command 
SET ACL/ACL/DELETE=ALL to delete all ACEs. 

On OpenVMS VAX systems, use the command SET 
SECURITY/ACL/DELETE=ALL to delete all ACEs. 


The following commands do not delete protected ACEs: 


SET ACL/ACL/DELETE 

SET ACL/LIKE 

SET ACL/DEFAULT 

SET SECURITY/ACL/DELETE (VAX only) 
SET SECURITY/LIKE (VAX only) 

SET SECURITY/DEFAULT (VAX only) 


ACL Editor 
Alarm ACE 


Nopropagate 


None 


access 


Indicates that the ACE cannot be copied by operations that 
usually propagate ACEs. 


On OpenVMS AXP systems, for example, the ACE canno 
be copied by the SET ACL/LIKE or SET ACL/DEFAULT 
commands. 


On OpenVMS VAX systems, for example, the ACE cannot 
be copied by the SET SECURITY/LIKE or SET SECURITY 
/DEFAULT commands. 


Indicates that no attributes apply to an entry. Although 
you can create an ACL entry with OPTIONS=None, the 
attribute is not displayed. Whenever you specify additional 
attributes with the None attribute, the other attributes take 
precedence. The None attribute is equivalent to omitting 
the field. 


Specify any access that is valid for the object class. See the Security Guide for 

a listing of valid access types. For an Alarm ACE to have any effect, you must 
include the keywords SUCCESS, FAILURE, or both. For example, if the auditing 
criterion is a failure to obtain write access to an object, specify the following 


Alarm ACE: 


(ALARM=SECURITY, ACCESS=WRITE+FAILURE) 


Audit ACE (VAX Only) 


<i> 


Format 


Parameters 


On VAX systems, specifies the access criteria that cause an audit message to be 
written to the system security audit log file. A message is recorded only if ACL 
audits are enabled with the DCL command SET AUDIT/AUDIT/ENABLE=ACL. 


(AUDIT=SECURITY [,OPTIONS=attributes], ACCESS=access-type[+access-type...]) 


options 


Specify one of the following attributes: 


Default 


Indicates that an ACE is to be included in the ACL of 
any files created within a directory. When the entry is 
propagated, the Default attribute is removed from the ACE 
of the created file. This attribute is valid for directory files 
only. 


Hidden 


Protected 


Nopropagate 


None 


access 


ACL Editor 
Audit ACE (VAX Only) 


Indicates that this ACE should be changed only by the 
application that adds it. Although the Hidden attribute 

is valid for any ACE type, its intended use is to hide 
application ACEs. The ACL editor displays the ACE only to 
show its relative position within the ACL, not to facilitate 
editing of the ACE. Unless you have the SECURITY 
privilege, you cannot display a hidden ACE with the DCL 
command DIRECTORY/ACL. 

You cannot display a hidden ACE with the DCL commands 
SHOW SECURITY, SHOW ACL, or DIRECTORY 
/SECURITY, and you cannot modify or delete a hidden ACE 
with the SET SECURITY command. To create a hidden 
ACE, an application can invoke the $SET_SECURITY 
system service. 


Protects the ACE against casual deletion. Protected ACEs 
can be deleted only in the following ways: 


e By using the ACL editor 


e By specifying the ACE explicitly when deleting it 
Use the DCL command SET SECURITY/ACL=(ace) 
/DELETE to specify and delete an ACE. 


e By deleting all ACEs, both protected and unprotected 


Use the DCL command SET SECURITY/ACL 
/DELETE=ALL to delete all ACEs. 


The following commands do not delete protected ACEs: 


SET SECURITY/ACL/DELETE 
SET SECURITY/LIKE 
SET SECURITY/DEFAULT 


Indicates that the ACE cannot be copied by operations that 
usually propagate ACEs. 


For example, the ACE cannot be copied by the SET 
SECURITY/LIKE or SET SECURITY/DEFAULT 
commands. 


Indicates that no attributes apply to an entry. Although 
you can create an ACL entry with OPTIONS=None, the 
attribute is not displayed. Whenever you specify additional 
attributes with the None attribute, the other attributes take 
precedence. The None attribute is equivalent to omitting 
the field. 


Specify any access that is valid for the object class. See the Security Guide for 
a listing of valid access types. For an Audit ACE to have any effect, you must 
include the keywords SUCCESS, FAILURE, or both. For example, if the auditing 
criterion is a failure to obtain write access to an object, specify the following Audit 


ACE: 


(AUDIT=SECURITY , ACCESS=WRITE+FAILURE) ¢@ 


ACL Editor 


Creator ACE (VAX Only) 


Creator ACE (VAX Only) 


<> 


Format 


Parameters 


1-10 


On VAX systems, adds an extra ACE to the ACL for a file created within the 
directory to which you assign the Creator ACE. The Creator ACE applies only 
when the following conditions exist: 


e The file being created is not owned by the user identification code (UIC) of the 
process creating the file. 


e The process creating the file does not have system privileges. 


For example, both of these conditions exist when a process holding a general 
identifier with the Resource attribute creates a file in a directory owned by 
that identifier. In this situation, the system adds an extra ACE at the top 

of the new file’s ACL. If there is a Creator ACE in the ACL for the parent 
directory, the system propagates the access specified in the Creator ACE to the 
new ACE. If a directory lacks a creator ACE, the system assigns an extra ACE 
with a combination of control access and ownership access. A Creator ACE with 
ACCESS=NONE suppresses the addition of the extra ACE. 


The Creator ACE applies to directory files only. 


See the Security Guide for more information. 


(CREATOR [,OPTIONS=attribute[+attribute...]] 
,ACCESS=access-type[+access-type...]) 


options 
Specify any of the following attributes: 
Protected Protects the ACE against casual deletion. Protected ACEs 


can be deleted only in the following ways: 
e By using the ACL editor 


e By specifying the ACE explicitly when deleting it 
Use the DCL command SET SECURITY/ACL=(ace) 
/DELETE to specify and delete an ACE. 


e By deleting all ACEs, both protected and unprotected 
Use the DCL command SET SECURITY/ACL 
/DELETE=ALL to delete all ACEs. 

The following commands do not delete protected ACEs: 


SET SECURITY/ACL/DELETE 
SET SECURITY/LIKE 
SET SECURITY/DEFAULT 


ACL Editor 
Creator ACE (VAX Only) 


Nopropagate Indicates that the ACE cannot be copied by operations that 
usually propagate ACEs. 
For example, the ACE cannot be copied by the SET 
SECURITY/LIKE or SET SECURITY/DEFAULT 
commands. 


None Indicates that no attributes apply to an entry. Although 
you can create an ACL entry with OPTIONS=None, the 
attribute is not displayed. Whenever you specify additional 
attributes with the None attribute, the other attributes take 
precedence. The None attribute is equivalent to omitting 
the field. 


access ; 
Specify access types that are valid for files (read, write, execute, delete, and 
control). ¢ 


Default Protection ACE 


Format 


Parameters 


Defines a UIC-based protection to be propagated to new files throughout a 
directory tree. The protection code in the ACE is assigned to new files created in 
the directory. The Default Protection ACE applies to directory files only. 


Although the system propagates the Default Protection ACE to new 
subdirectories, the protection code is not assigned to the subdirectories. Instead, 
the subdirectories receive a modified copy of the parent directory’s protection code 
in which delete access is not granted. 


An example of a Default Protection ACE is as follows: 
(DEFAULT PROTECTION, S:RWED,0:RWED,G,W) 


The ACE grants read, write, execute, and delete access to users in the system (S) 
and owner (O) categories but no access to users in the group and world categories. 
For more information, see the Security Guide. 


(DEFAULT_PROTECTION[,OPTIONS=attribute[+attribute...]],access) 


options 
Specify any of the following attributes: 


1-11 


ACL Editor 
Default Protection ACE 


Hidden Indicates that this ACE should be changed only by the 
application that adds it. Although the Hidden attribute 
is valid for any ACE type, its intended use is to hide 
Application ACEs. The ACL editor displays the ACE 
only to show its relative position within the ACL, not 
to facilitate editing of the ACE. Unless you have the 
SECURITY privilege, you cannot display a hidden ACE 
with the DCL command DIRECTORY/ACL. 
On OpenVMS AXP systems, you cannot modify or delete a 
hidden ACE with the DCL command SET ACL. To create a 
hidden ACE, an application can invoke the $;CHANGE_ACL 
system service. 
On OpenVMS VAX systems, you cannot display a hidden 
ACE with the DCL commands SHOW SECURITY, SHOW 
ACL, or DIRECTORY/SECURITY, and you cannot modify or 
delete a hidden ACE with the SET SECURITY command. 
To create a hidden ACE, an application can invoke the 
$SET_SECURITY system service. 


Protected Protects the ACE against casual deletion. Protected ACEs 
can be deleted only in the following ways: 


e By using the ACL editor 


e By specifying the ACE explicitly when deleting it 
On OpenVMS AXP systems, use the DCL command 
SET ACL/ACL=(ace)/DELETE to specify and delete an 
ACE. 
On OpenVMS VAX systems, use the command SET 
SECURITY/ACL=(ace)/DELETE to specify and delete 
an ACE. 


e By deleting all ACEs, both protected and unprotected 
On OpenVMS AXP systems, use the DCL command 
SET ACL/ACL/DELETE=ALL to delete all ACEs. 

On OpenVMS VAX systems, use the command SET 
SECURITY/ACL/DELETE=ALL to delete all ACEs. 


The following commands do not delete protected ACEs: 


SET ACL/ACL/DELETE 

SET ACL/LIKE 

SET ACL/DEFAULT 

SET SECURITY/ACL/DELETE (VAX only) 
SET SECURITY/LIKE (VAX only) 

SET SECURITY/DEFAULT (VAX only) 
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ACL Editor 
Default Protection ACE 


Nopropagate Indicates that the ACE cannot be copied by operations that 
usually propagate ACEs. 
On OpenVMS AXP systems, for example, the ACE cannot 
be copied by the SET ACL/LIKE or SET ACL/DEFAULT 
commands. 


On OpenVMS VAX systems, for example, the ACE cannot 
be copied by the SET SECURITY/LIKE or SET SECURITY 
/DEFAULT commands. 


None Indicates that no attributes apply to an entry. Although 
you can create an ACL entry with OPTIONS=None, the 
attribute is not displayed. Whenever you specify additional 
attributes with the None attribute, the other attributes take 
precedence. The None attribute is equivalent to omitting 
the field. 


access 
Specify access in the format of a UIC-based protection code, which is as follows: 


[category: list of access allowed (, category: list of access allowed,...)] 


e User categories include system (S), owner (O), group (G), and world (W). 
See the Security Guide for a definition of these categories. Access types for 
files include read (R), write (W), execute (E), and delete (D). The access 
type is assigned to each ownership category and is separated from its access 
types with a colon (:). 


e A null access list means no access, so when you omit an access type for a user 
category, that category of user is denied that type of access. To deny all access 
to a user category, specify the user category without any access types. Omit 
the colon after the user category when you deny access to a category of users. 


e When you omit a user category from a protection code, the current access 
allowed that category of user is set to no access. 


identifier ACE 


Format 


Controls the type of access allowed to a particular user or group of users. An 
example of an Identifier ACE is as follows: 


( IDENTIFIER=SALES , ACCESS=READ+WRITE) 


A system manager can use the Authorize utility (AUTHORIZE) to grant the 
SALES identifier to a specific group of users. Read and write access to the file 
INVENTORY.DAT is then granted to users who hold the SALES identifier. 


For more information, see the Security Guide. 


(IDENTIFIER=identifier[+identifier...] [,OPTIONS=attributes[+attributes...]] 
»~ACCESS=access-type[+access-type...]) 
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identifier ACE 


Parameters 
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identifier 


Specifies a user or groups of users whose access to an object is defined in the 
ACE. A system manager creates or removes identifiers and assigns users to hold 


these identifiers. 


Types of identifiers are as follows: 


UIC 


General 


Environmental 


Identifiers in alphanumeric format that are based on 
the user identification codes (UICs) and that uniquely 
identify each user on the system. Users with accounts 
on the system automatically receive a UIC identifier, for 
example, [GROUP1,JONES] or [JONES]. Thus, each UIC 
identifier specifies a particular user. 


Identifiers defined by the security administrator in the 
rights list to identify groups of users on the system. 

A general identifier is an alphanumeric string of 1 

to 31 characters, containing at least one alphabetic 
character. It can include the letters A to Z, dollar signs 
($), underscores (_), and the numbers 0 to 9, for example, 
92SALES$, ACCOUNT_3, or PUBLISHING. 


Identifiers describing different types of users based 

on their initial entry into the system. Environmental 
identifiers are also called system-defined identifiers. 
Environmental identifiers correspond directly to the login 
classes described in the Security Guide. They include 
batch, network, interactive, local, dialup, and remote. 


For more information, see the Security Guide. 


options 


Specify any of the following attributes: 


Default 


Indicates that an ACE is to be included in the ACL of 
any files created within a directory. When the entry is 
propagated, the Default attribute is removed from the ACE 
of the created file. This attribute is valid for directory files 
only. 

Note that an Identifier ACE with the Default attribute has 
no effect on access. 


Hidden 


Protected 


ACL Editor 
Identifier ACE 


Indicates that this ACE should be changed only by the 
application that adds it. Although the Hidden attribute 

is valid for any ACE type, its intended use is to hide 
Application ACEs. The ACL editor displays the ACE 

only to show its relative position within the ACL, not 

to facilitate editing of the ACE. Unless you have the 
SECURITY privilege, you cannot display a hidden ACE 
with the DCL command DIRECTORY/ACL. 

On OpenVMS AXP systems, you cannot modify or delete a 
hidden ACE with the DCL command SET ACL. To create a 
hidden ACE, an application can invoke the $CHANGE_ACL 
system service. 

On OpenVMS VAX systems, you cannot display a hidden 
ACE with the DCL commands SHOW SECURITY, SHOW 
ACL, or DIRECTORY/SECURITY, and you cannot modify or 
delete a hidden ACE with the SET SECURITY command. 
To create a hidden ACE, an application can invoke the 
$SET_SECURITY system service. 


Protects the ACE against casual deletion. Protected ACEs 
can be deleted only in the following ways: 


e By using the ACL editor 


e By specifying the ACE explicitly when deleting it 
On OpenVMS AXP systems, use the DCL command 
SET ACL/ACL=(ace)/DELETE to specify and delete an 
ACE. 
On OpenVMS VAX systems, use the command SET 
SECURITY/ACL=(ace)/DELETE to specify and delete 
an ACE. 


e By deleting all ACEs, both protected and unprotected 
On OpenVMS AXP systems, use the DCL command 
SET ACL/ACL/DELETE=ALL to delete all ACEs. 

On OpenVMS VAX systems, use the command SET 
SECURITY/ACL/DELETE=ALL to delete all ACEs. 


The following commands do not delete protected ACEs: 


SET ACL/ACL/DELETE 

SET ACL/LIKE 

SET ACL/DEFAULT 

SET SECURITY/ACL/DELETE (VAX only) 
SET SECURITY/LIKE (VAX only) 

SET SECURITY/DEFAULT (VAX only) 
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Identifier ACE 


Subsystem ACE (VAX Only) 


<i> 


Format 


Parameters 


1-16 


Nopropagate 


None 


access 


Indicates that the ACE cannot be copied by operations that 
usually propagate ACEs. 


On OpenVMS AXP systems, for example, the ACE cannot 
be copied by the SET ACL/LIKE or SET ACL/DEFAULT 
commands. 


On OpenVMS VAX systems, for example, the ACE cannot 
be copied by the SET SECURITY/LIKE or SET SECURITY 
/DEFAULT commands. 


Indicates that no attributes apply to an entry. Although 
you can create an ACL entry with OPTIONS=None, the 
attribute is not displayed. Whenever you specify additional 
attributes with the None attribute, the other attributes take 
precedence. The None attribute is equivalent to omitting 
the field. 


Specify access types that are valid for the object class. See the Security Guide for 
a listing of valid access types. 


On VAX systems, grants additional identifiers to a process while it is running the 
image to which the Subsystem ACE applies. Users with execute access to the 
image can access objects that are in the protected subsystem, such as data files 
and printers, but only when they run the subsystem images. The Subsystem ACE 
applies to executable images only. 


An example of a Subsystem ACE is as follows: 


(SUBSYSTEM, IDENTIFIER=ACCOUNTING) 


(SUBSYSTEM, [OPTIONS=attribute[+attribute...], ]IDENTIFIER=identifier 
[,AT TRIBUTES=attribute[+attribute...}] [,IDENTIFIER=identifier 
[,AT TRIBUTES=attribute[+attribute...]],...]) 


options 


Specify any of the following attributes: 


ACL Editor 
Subsystem ACE (VAX Only) 


Protected Protects the ACE against casual deletion. Protected ACEs 
can be deleted only in the following ways: 


e By using the ACL editor 


e By specifying the ACE explicitly when deleting it 
Use the DCL command SET SECURITY/ACL=(ace) 
/DELETE to specify and delete an ACE. 


e By deleting all ACEs, both protected and unprotected 


Use the DCL command SET SECURITY/ACL 
/DELETE=ALL to delete all ACEs. 


The following commands do not delete protected ACKs: 


SET SECURITY/ACL/DELETE 
SET SECURITY/LIKE 
SET SECURITY/DEFAULT 


Nopropagate Indicates that the ACE cannot be copied by operations that 
usually propagate ACEs. 
For example, the ACE cannot be copied by the SET 
SECURITY/LIKE or SET SECURITY/DEFAULT 
commands. 


None Indicates that no attributes apply to an entry. Although 
you can create an ACL entry with OPTIONS=None, the 
attribute is not displayed. Whenever you specify additional 
attributes with the None attribute, the other attributes take 
precedence. The None attribute is equivalent to omitting 
the field. 


identifier 

A general identifier specifying the users or groups of users who are allowed 

or denied access to an object. It is an alphanumeric string of 1 through 31 
characters, containing at least one alphabetic character. It can include the letters 
A to Z, dollar signs ($), underscores (_), and the numbers 0 to 9. For more 
information, see the Security Guide. 


A Subsystem ACE can have multiple pairs of identifiers, with special attributes 
assigned to the identifiers. A subsystem might require several identifiers to work 
properly. For example: 


(SUBSYSTEM, IDENTIFIER=MAIL SUBSYSTEM, ATTRIBUTE=NONE, IDENTIFIER=BLDG5 , ATTRIBUTE=NONE ) 


attribute 
The identifier characteristics you specify when you add identifiers to the rights 
list or grant identifiers to users. You can specify the following attribute: 


Resource Allows holders of the identifier to charge disk space to 
the identifier. Used only for file objects. 
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ACL Editor Qualifiers 


When you invoke the ACL editor, you can include qualifiers on the command line 
that identify the object class and the editing mode (prompt or noprompt). You can 
also use qualifiers to name a journaling file or to recover an ACL editing session. 

This section describes the qualifiers listed in Table 1-1. 


Table 1-1 ACL Editor Qualifiers 


Qualifier Description 
t/CLASS Specifies the class of object whose ACL is being edited 
/JOURNAL Controls whether a journal file is created for the editing 
session 
/MODE Specifies the use of prompting during the editing session 
/OBJECT_TYPE Specifies the class of object whose ACL is being edited 
/RECOVER Restores an ACL from a journal file at the beginning of 


an editing session 


VAX specific 


On VAX systems, all of the qualifiers described in this section also apply to the 
SET SECURITY/EDIT command. You can substitute the SET SECURITY/EDIT 
command wherever the EDIT/ACL command is shown; the syntax is the same for 
both commands. 


Note that the /CLASS qualifier and the /OBJECT_TYPE qualifier are 
synonymous. ¢ 


/CLASS (VAX Only) 


<> 


Format 


Description 
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On VAX systems, specifies the class of the object whose ACL is being edited. 
Unless the object is a file, you must specify the object class. 


The /CLASS qualifier and the /OBJECT_TYPE qualifier are synonymous. 


/CLASS_ =object-class 


To edit the ACL for an object other than a file, specify the object class with the 
/CLASS qualifier. Specify one of the following classes: 


Examples 


/SJOURNAL 


Format 


Description 


CAPABILITY 


COMMON_EVENT_CLUSTER 
DEVICE 

FILE 
GROUP_GLOBAL_SECTION 
LOGICAL_NAME_TABLE 
QUEUE 


RESOURCE_DOMAIN 
SECURITY_CLASS 
SYSTEM_GLOBAL_SECTION 
VOLUME 


1. $ EDIT/ACL/CLASS=DEVICE WORK1 


ACL Editor 
/CLASS (VAX Only) 


A system capability, such as the ability to 
process vector instructions. Currently, the 
only defined object name for the CAPABILITY 
class is VECTOR, which governs the ability 
of a subject to access a vector processor on 
the system. Note that you must supply the 
capability name as the object name parameter. 


A common event flag cluster. 

A device, such as a disk or tape drive. 

A file or a directory file. This is the default. 
A group global section. 

A logical name table. 


A batch queue or a device (printer, server, or 
terminal) queue. 


A resource domain. 

A security class. 

A system global section. 
A disk or tape volume. 


The command in this example specifies that the object WORK1 is a device. 


2. $ EDIT/ACL/CLASS=QUEUE FAST BATCH 


The command in this example creates an ACL for the FAST_BATCH queue. 
Note that if you create an ACL for a generic queue, you must create identical 
ACLs for all execution queues to which jobs can be directed. ¢ 


Controls whether a journal file is created for the editing session. 


/JOURNAL  [=file-spec] 
/NOJOURNAL 


By default, the ACL editor keeps a journal file containing a copy of modifications 
made during an editing session. The journal file is given the name of the object 
and a .TJL file type. If you specify a different name for the file, do not include 


any wildcard characters. 


To prevent the ACL editor from creating a journal file, specify /NOJOURNAL. 


If your editing session ends abnormally, you can recover the changes made during 
the aborted session by invoking the ACL editor with the /RECOVER qualifier. 
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/JOURNAL 


Example 


/MODE 


Format 


Description 


Example 


$ EDIT/ACL/JOURNAL=COMMONACL.SAV MECH1117.DAT 


With this command, you create a journal file named COMMONACL.SAV. The file 
contains a copy of the ACL and the editing commands used to create the ACL for 
the file MECH1117.DAT. 


If the editing session is interrupted, you can recover your edits by specifying the 
name COMMONACL.SAV with the /RECOVER qualifier. 


$ EDIT/ACL/CLASS=RESOURCE/JOURNAL=ZERO_RESOURCE.TJL [0] 


If you edit an ACL for the resource domain [0], the ACL editor attempts to 
create the file [0].TJL on the default device and fails. To create an ACL for the 
resource [0], you must specify a different name for the journal file (as shown in 
this example) or suppress the creation of a journal file with the /NOJOURNAL 
qualifier. 


Specifies the use of prompting during the editing session. 


/MODE =option 


By default, the ACL editor prompts you for each ACE and provides values for 
some of the fields within an ACE ((MODE=PROMPT). To disable prompting, 
specify /MODE=NOPROMPT on the command line. 


$ EDIT/ACL/MODE=NOPROMPT WEATHERTBL.DAT 


With this command, you initiate an ACL editing session to create an ACL for the 
file WEATHERTBL.DAT. The /(MODE=NOPROMPT qualifier specifies that no 
assistance is required in entering the ACL entries. 


/OBJECT_TYPE 


<> 


Format 
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Specifies the class of the object whose ACL is being edited. Unless the object is a 
file, you must specify the object class. 


On VAX systems, use the /CLASS qualifier instead of the /OBJECT_TYPE 
qualifier. ¢ 


/OBJECT_TYPE =object-class 


Description 


Examples 


/RECOVER 


Format 


Description 


Example 


ACL Editor 
/OBJECT_TYPE 


To edit the ACL for an object other than a file, specify the object class with the 
/OBJECT_TYPE qualifier. Specify one of the following classes: 


DEVICE A device, such as a disk or tape drive. 

FILE A file or a directory file. This is the default. 
GROUP_GLOBAL_SECTION A group global section. 
LOGICAL_NAME_TABLE A logical name table. 

QUEUE A batch queue or a device (printer, server, or 


terminal) queue. 
SYSTEM_GLOBAL_ SECTION A system global section. 


1. $ EDIT/ACL/OBJECT_TYPE=DEVICE WORK1 


The command in this example specifies that the object WORK1 is a device. 


205 EDIT/ACL/OBJECT_TYPE=QUEUE FAST BATCH 


The command in this example creates an ACL for the FAST_BATCH queue. 
Note that if you create an ACL for a generic queue, you must create identical 
ACLs for all execution queues to which jobs can be directed. 


Restores an ACL from a journal file at the beginning of an editing session. 


/RECOVER §[=file-spec] 
/NORECOVER 


The /RECOVER qualifier specifies that the ACL editor must restore the ACL from 
a journal file. The ACL editor restores the ACL to the state it was in when the 
last ACL editing session ended abnormally. 


By default the journal file is given the name of the object and a .TJL file type. If 
you specify a more meaningful name for the journal file when you invoke the ACL 
editor (by using /JOURNAL), specify that file name with the (RECOVER qualifier. 


$ EDIT/ACL/JOURNAL=SAVEACL MYFILE.DAT 
User creates ACL until system crashes 


$ EDIT/ACL/JOURNAL=SAVEACL/RECOVER=SAVEACL MYFILE.DAT 
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ACL Editor 
/RECOVER 
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ACL is restored and user proceeds with editing until done 


"2 
$ 


The first command in this example starts the ACL editing session and specifies 
that the ACL editor must save the journal file SAVEACL.TJL if the session ends 
abnormally. The session proceeds until it is aborted by a system crash. 


The next command restores the lost session with the journal file SAVEACL.TJL. 
To end the session, press Ctrl/Z. The ACL editor saves the edits and deletes the 
journal file. 
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Accounting Utility 


ACCOUNTING Description 
The Accounting utility (ACCOUNTING) produces reports of system resource use. 
You can use ACCOUNTING qualifiers to: 
e¢ Produce a number of report formats 
¢ Choose how the reports are organized 
¢ Choose on which resources you want reports 


You can use the reports to learn more about how the system is used and how it 
performs. 
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ACCOUNTING Usage Summary 


Format 


Produces reports of resource use. 


ACCOUNTING | [filespec{,...]] 


Parameter 
filespec{,...] 
Specifies the accounting files you want to process. 


Each file specification can include the percent (%) and asterisk (*) wildcard 
characters. If it does not include the device or directory, your current default 
device or directory is used. If it does not include the file name or file type, the 
values ACCOUNTNG and DAT are used respectively. 


If you do not specify a file, the command processes the file 
SYS$MANAGER:ACCOUNTNG.DAT. 


Usage Summary 


2-4 


Use this DCL command to run the Accounting utility: 
$ ACCOUNTING [filespec{,...]] 


You are returned to DCL level when the command has finished processing the 
specified accounting files. 


By default, the command directs its output to the current SYS$OUTPUT device. 
If you want to direct the output to a file, use the /OUTPUT qualifier. 


Requires READ access to the accounting files you specify, and to the directories 
containing them. 


ACCOUNTING Qualifiers 


This section describes and provides examples of each ACCOUNTING qualifier. 
Table 2-1 summarizes the ACCOUNTING qualifiers. 


Table 2-1 ACCOUNTING Qualifiers 


Qualifier 


/ACCOUNT 
/ADDRESS 


/BEFORE 
/BINARY 
/BRIEF 
/ENTRY 


/FULL 
ADENT 
AMAGE 
/JOB 


/LOG 
/NODE 


/OUTPUT 
/OWNER 


/PRIORITY 
/PROCESS 
/QUEUE 


/REJECTED 
/REMOTE_ID 


/REPORT 


/SINCE 
/SORT 
/STATUS 


/SUMMARY 
/TERMINAL 


/TITLE 


Description 


Selects or rejects records for the specified account names 


Selects or rejects records for DECnet for OpenVMS requests 
made by the specified nodes 


Selects all records time-stamped before the specified time 
Copies the selected records to a new file in binary format 
Produces a brief report of the selected records 


Selects or rejects records for print and batch jobs with the 
specified queue entry numbers 


Produces a full report of the selected records 
Selects or rejects records for the specified processes 
Selects or rejects records for the specified images 


Selects or rejects records for print and batch jobs with the 
specified job names 


Outputs informational messages 


Selects or rejects records for DECnet for OpenVMS requests 
made by the specified nodes 


Specifies the output file 


Selects or rejects records for subprocesses created by the 
specified processes 


Selects or rejects records for the specified priority 
Selects or rejects records for the specified types of process 


Selects or rejects records for print or batch jobs executed by 
the specified queues 


Copies the rejected records to a new file 


Selects or rejects records for DECnet for OpenVMS requests 
made by the specified remote IDs 


Specifies the resources that you want to summarize in a 
summary report 


Selects all records time-stamped at or after the specified time 
Sorts the selected records 


Selects or rejects records with the specified final exit status 
codes 


Produces a summary report of the selected records 


Selects or rejects records for interactive sessions at the 
specified terminals 


Specifies the title shown on the first line of a summary report 
(continued on next page) 


ACCOUNTING 


/ACCOUNT 


Format 


Description 


Examples 
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Table 2-1 (Cont.) ACCOUNTING Qualifiers 


Qualifier Description 

/TYPE Selects or rejects the specified types of record 

/UIC Selects or rejects records for the specified UICs 
/USER Selects or rejects records for the specified user names 


Selects or rejects records for the specified account names. 


/ACCOUNT=([-Jaccount{,...]) 


The /ACCOUNT qualifier uses the value of the account field to select records for 
processing. This field is present in all records except file backward link and file 
forward link records. 


The /ACCOUNT qualifier selects only records that have the specified values in the 
account field. If you precede the values with a minus sign, it selects all records 
except those with the specified values. 


Table 2-2 shows the values stored in the account field of login failure and system 
initialization records. 


Table 2—2 Special Account Field Values 


Value Description 

<batch> Batch job login failure 

<det> Detached process login failure 
<login> Interactive login failure 
<net> Network login failure 

<start> System startup 


Note that when you specify these account field values as qualifier values, you 
must enclose them in quotes. Like all DCL commands, the ACCOUNTING 
command converts strings to uppercase unless they are enclosed in quotes. 


1. $ ACCOUNTING /ACCOUNT=(SALES, QA) 


This example processes the file SYS$+MANAGER:ACCOUNTNG.DAT. It 
produces a brief report of all records for the account names SALES and QA. 


/ADDRESS 


Format 


Description 


Example 


/BEFORE 


Format 


Description 


ACCOUNTING 
/ACCOUNT 


2. $ ACCOUNTING /ACCOUNT=(-SALES, QA) /FULL 


This example processes the file SYSSMANAGER:ACCOUNTNG.DAT. It 
produces a full report of all records except for the account names SALES and 


QA. 


Selects or rejects records for DECnet for OpenVMS requests made by the specified 
nodes. 


/ADDRESS=([~]node_addressf,...]) 


The /ADDRESS qualifier uses the value of the remote node address field to select 
records for processing. This field is present in all records except file backward 
link and file forward link records. For records that contain information about 
DECnet for OpenVMS requests, it contains the address of the node that made the 
request. 


The /ADDRESS qualifier selects only records with the specified values in the 
remote node address field. If you precede the values with a minus sign, it selects 
all records except those with the specified values. 


See also the /NODE and /REMOTE_ID qualifiers, which select or reject records 
for DECnet for OpenVMS requests made by specified node names and remote IDs 
respectively. 


$ ACCOUNTING /ADDRESS=19656 


This example processes the file SYS$MANAGER:ACCOUNTNG.DAT. It produces 
a brief report of all records for DECnet for OpenVMS requests made by the node 
with the address 19656. 


Selects all records time-stamped before the specified time. 


/BEFORE[=time] 


All records in an accounting file are time-stamped with the time the record was 
logged in the file. 


The /BEFORE qualifier selects only the records time-stamped before the specified 
time. You can specify an absolute time, a delta time, or a combination of the two. 
If you omit the time, 00:00 hours on the current day is used. 


ACCOUNTING 


/BEFORE 


Example 


/BINARY 


Format 


Description 


Examples 
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See also the /SINCE qualifier, which selects records time-stamped at or after a 
specified time. 


$ ACCOUNTING /SINCE=1-NOV-1994 /BEFORE=1-DEC-1994 


This example produces a brief report of all records time-stamped in the file 
SYS$MANAGER:ACCOUNTNG.DAT during November 1994. 


Copies the selected records to a new file in binary format. 


/BINARY 


The /BINARY qualifier specifies that records are output in binary format to the 
file specified by the /OUTPUT qualifier. Use the Accounting utility to process this 
file later. 


See also the /BRIEF, /FULL, and /SUMMARY qualifiers, which process the 
selected records to produce a report. 


You cannot use the /BINARY qualifier with the /BRIEF, /FULL, or /SUMMARY 
qualifiers. 


1. $ ACCOUNTING /USER=SMITH /BINARY /OUTPUT=MYDISK: [ACCOUNTING ]MYACC.DAT 


This example creates the file MYDISK:ACCOUNTINGJMYACC.DAT. It 
processes the file SYS$SMANAGER:ACCOUNTNG.DAT, copying all records for 
the user SMITH to the new file in binary format. 


2. $ ACCOUNTING /TYPE=PRINT - 
_$ /BINARY /OUTPUT=PRINT_INFO.DAT /REJECTED=NOT PRINT INFO.DAT 


This example creates two files in the default directory, 
PRINT_INFO.DAT and NOT_PRINT_INFO.DAT. It processes the 

file SYS$MANAGER:ACCOUNTNG.DAT, copying print records to 
PRINT_INFO.DAT and other records to NOT_PRINT_INFO.DAT. These 
records are in binary format. 


/BRIEF 


Format 


Description 


ACCOUNTING 
/BRIEF 


Produces a brief report of the selected records. 


/BRIEF (default) 


The /BRIEF qualifier is the default. It produces a brief report of the selected 
records. The report is directed to the current SYS$OUTPUT device, unless you 
use the /OUTPUT qualifier to write it to a file. 


Each line of a brief report corresponds to a record in the accounting file. It does 
not show resources used, but gives the information shown in Table 2—3 about 
each record in the accounting file. 


Table 2-3 Information in a Brief Accounting Report 
Column Description 


Date/Time When the record was logged in the accounting file. 


Type The type of the record (see Table 2—5 for details of the different 
types of record). 
Subtype For records of type IMAGE, this is the name of the image (the 


file name portion of its file specification). For records of type 
PROCESS, it is the type of the process (BATCH, DETACHED, 
INTERACTIVE, NETWORK, or SUBPROCESS). 


User name The user name. For login failures where the user did not give a 
valid user name, this is shown as <login>. 

ID The process identification (PID). For print jobs, this is the PID of 
the process that submitted the job. 

Source The terminal associated with an interactive process or, for 


DECnet for OpenVMS requests, the name of the node that issued 
the request. 


Status The final exit status code, expressed as a hexadecimal value. 


To translate the final exit status code into the equivalent message text, use the 
F$MESSAGE lexical function, and precede the status code with %X, as in this 
example: 


$ MESSAGE = FSMESSAGE(%X00000001) 
$ SHOW SYMBOL MESSAGE 
MESSAGE = "SSYSTEM-S-NORMAL, normal successful completion" 


See also the /BINARY qualifier, which copies the selected records to a file, and 
the /FULL and /SUMMARY qualifiers, which produce full and summary reports 
of the selected records. 


You cannot use the /BRIEF qualifier with the /BINARY, /FULL, or /SUMMARY 
qualifiers. 
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ACCOUNTING 


/BRIEF 


Example 


/ENTRY 


Format 


Description 


Examples 
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$ ACCOUNTING 


This example produces a brief report of all records in the file 

SYS$SMANAGER:ACCOUNTNG.DAT,. 

This is an example of the report that is produced. 
Date / Time Type Subtype Username ID Status 
7-SEP-1994 17:20:08 FILE BL 00000000 00000000 
7-SEP-1994 17:22:05 PROCESS DETACHED JONES 516000E1 02DBA002 
7-SEP=-1994 17:22:10 PROCESS INTERACTIVE JONES 516000DD TWA10: 00000001 
7~SEP-1994 17:22:16 PROCESS INTERACTIVE JONES 51600104 TWA11: 0001C0F4 
7-SEP-1994 17:22:20 PROCESS DETACHED JONES 51600103 12DB821C 
8-SEP-1994 01:06:36 PROCESS SUBPROCESS SYSTEM 51600106 10000001 
8-SEP-1994 03:09:59 PROCESS BATCH SYSTEM 5160010F 10030001 
8-SEP-1994 09:13:15 LOGFAIL 51600105 00D3803C 
8-SEP-1994 09:14:40 IMAGE LOGINOUT JONES 51600110 00000000 
8-SEP-1994 09:28:57 PROCESS SUBPROCESS SMITH 51600119 10000001 
8-SEP-1994 09:50:18 PROCESS SUBPROCESS SMITH 5160011A 00000001 


Selects or rejects records for print and batch jobs with the specified queue entry 
numbers. 


/ENTRY=([—Jentry_number{,...]) 


The /ENTRY qualifier uses the value of the queue entry number field to select 
records for processing. This field is present in all records except file backward 
link and file forward link records. For records that contain information about 
print or batch jobs, it contains the unique entry number assigned to the job in the 
print or batch queue. 


The /ENTRY qualifier selects only records that have the specified values in the 
queue entry number field. If you precede the values with a minus sign, it selects 
all records except those with the specified values. 


See also the /JOB and /QUEUE qualifiers, which select or reject records for print 
and batch jobs with specified job and queue names. 


1. $ ACCOUNTING /ENTRY=(211,212,213) 


This example processes the file SYS$MANAGER:ACCOUNTNG.DAT. It 
produces a brief report of all records for print or batch jobs with a queue 
entry number of 211, 212, or 2138. 


/FULL 


Format 


Description 


ACCOUNTING 
/ENTRY 


2. $ ACCOUNTING /ENTRY=(-25,50) 


This example processes the file SYS$MANAGER:ACCOUNTNG.DAT. It 
produces a brief report of all records except those for print or batch jobs with 
a queue entry number of 25 or 50. 


Produces a full report of the selected records. 


/FULL 


The /FULL qualifier produces a full report of the selected records. The report 
is directed to the current SYS$OUTPUT device, unless you use the /OUTPUT 
qualifier to write it to a file. 


Full reports display one screen of information for each selected record. The 
information displayed, and the way that it is laid out, depend on the type of the 
record and the data it contains. 


The first line shows the event that caused the record to be logged in the 
accounting file. For example, for a record that was logged when an interactive 
process terminated, the first line shows INTERACTIVE Process Termination. 


For subprocesses, the Owner ID field shows the PID of the parent process. 


For records that contain information about DECnet for OpenVMS requests, the 
three Remote fields identify the remote user and remote node. 


The Processor time field shows the total CPU time used. This includes any vector 
CPU time used. The Vector CPU time field is shown only if vector CPU time has 
been used. 


Vector CPU time is the time that the process was scheduled on a vector-present 
CPU while that process was a vector consumer. Note that: 


e When a process is a vector consumer, it accrues vector CPU time when it is 
scheduled, even if it does not issue any vector instructions. 


e Processes that are scalar consumers or marginal vector consumers do not 
accrue vector CPU time, even when they are scheduled on vector-present 
CPUs. 


The privilege is shown as two hexadecimal numbers that represent the first and 
last 32 bits of the 64-bit privilege mask. To translate the privilege bit mask 
into privileges, refer to the definitions of the symbols that begin PRV$V_ in 

the $PRVDEF macro in the STARLET library. For example, the $PRVDEF 
macro defines the PRV$V_READALL symbol to equate to 35. This means that 
READALL privilege is represented by bit 35 set in the privilege mask. 


If you are processing only one file and you are displaying it on your screen, when 
you do not want to look at any more records, press Ctrl/Z to return to the DCL 
prompt. 
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ACCOUNTING / 


/FULL 
See also the /BINARY qualifier, which copies the selected records to a file, and 
the /BRIEF and /SUMMARY qualifiers, which produce brief and summary reports 
of the selected records. 
You cannot use the /FULL qualifier with the /BINARY, /BRIEF, or /SUMMARY 
qualifiers. 
Examples 
1. $ ACCOUNTING /FULL 
This example displays a full report of all the records in the file 
SYS$SMANAGER:ACCOUNTNG.DAT. This example screen shows a record 
that was logged when an interactive process terminated. The interactive 
process was created when the user JONES at the node HQ222 entered a SET 
HOST command to connect to the local node. 
INTERACTIVE Process Termination 
Username: FISH UIC: [DOC, FISH] 
Account: DOC Finish time: 23-APR-1994 15:21:23.83 
Process ID: 20A0029B Start time: 23-APR-1994 15:19:08.28 
Owner ID: Elapsed time: 0 00:02:15.55 
Terminal name: RTA2: Processor time: 0 00:00:04.14 
Remote node addr: 63576 Priority: 4 
Remote node name: HQ222 Privilege <31-00>: 00108000 
Remote ID: JONES Privilege <63-32>: 00000000 
Queue entry: Final status code: 00000001 
Queue name: 
Job name: 
Final status text: %SYSTEM-S-NORMAL, normal successful completion 
Page faults: 2043 Direct I0: 159 
Page fault reads: 68 Buffered I0: 228 
Peak working set: 852 Volumes mounted: 0 
Peak page file: 5512 Images executed: 10 
Vector CPU time: 0 00:00:0.54 
Press RETURN for Next Record > 
2. $ ACCOUNTING /FULL /OUTPUT=MYACC 
This example creates the output file MYACC.LIS in the default directory. It 
processes the file SYS$MANAGER:ACCOUNTNG.DAT, writing a full report 
of all records to the new output file. 
ADENT 
Selects or rejects records for the specified processes. 
Format 


|DENT=([-Ipid....]) 
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Description 


Examples 


[MAGE 


Format 


Description 


ACCOUNTING 
ADENT 


The /IDENT qualifier uses the value of the process identification (PID) field 

to select records for processing. This field is present in all records except file 
backward link and file forward link records. For print job records, it contains the 
PID of the process that submitted the job. 


The /IDENT qualifier selects only records that have the specified values in the 
PID field. If you precede the values with a minus sign, it selects all records except 
those with the specified values. 


See also the /OWNER qualifier, which selects or rejects records for subprocesses 
created by specified processes. 


1. $ ACCOUNTING /IDENT=(25634,045A6B) 


This example processes the file SYS$MANAGER:ACCOUNTNG.DAT. It 
produces a brief report of all records for processes with a PID of 25634 or 
045A6B. 


2. §$ ACCOUNTING /IDENT=(-25634,045A6B) 


This example processes the file SYSS$MANAGER:ACCOUNTNG.DAT. It 
produces a brief report of all records except those for processes with a PID of 
25634 or 045A6B. 


Selects or rejects records for the specified images. 


[|MAGE=([-limage_namef{....]) 


The /IMAGE qualifier uses the value of the image name field to select records for 
processing. This field is present only in records of type IMAGE, and contains the 
name of the image. 


Note that the system does not track records of type IMAGE by default. To enable 
the tracking of IMAGE records, use the SET ACCOUNTING command. 


The /IMAGE qualifier selects only records that have the specified values in the 
image name field. If you precede the values with a minus sign, it selects all 
records except those with the specified values. 


Each image name is a string that gives the file name portion of the image file 
specification. Do not include the device, directory, or file type. 
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ACCOUNTING 


[MAGE 


Examples 


[JOB 


Format 


Description 


Examples 
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1. $ ACCOUNTING /IMAGE=DIRECTORY 


This example processes the file SYSSMANAGER:ACCOUNTNG.DAT. It: 
produces a brief report of all records for the DIRECTORY.EXE image. 


2. $ ACCOUNTING /IMAGE=-DIRECTORY 


This example processes the file SYSSMANAGER:ACCOUNTNG.DAT. It 
produces a brief report of all records except those for the DIRECTORY. EXE 
image. 


Selects or rejects records for print and batch jobs with the specified job names. 


/JOB=([-]job_namef,...]) 


The /JOB qualifier uses the value of the job name field to select records for 
processing. This field is present in all records except file backward link and file 
forward link records. For records that contain information about print and batch 
jobs, it contains the name of the job. 


The /JOB qualifier selects only records that have the specified values in the job 
name field. If you precede the values with a minus sign, it selects all records 
except those with the specified values. 


See also the /QUEUE and /ENTRY qualifiers, which select or reject records for 
print and batch jobs with specified queue names and queue entry numbers. 


1. $ ACCOUNTING /JOB=(MYJOB1,MYJOB2) 


This example processes the file SYS$MANAGER:ACCOUNTNG.DAT. It 
produces a brief report of all records for print or batch jobs named MYJOB1 
or MYJOB2. 


2. $ ACCOUNTING /JOB=(-MYJOB1,MYJOB2) /FULL 


This example processes the file SYS$MANAGER:ACCOUNTNG.DAT. It 
produces a full report of all records except those for print or batch jobs named 
MYJOB1 or MYJOB2. 


/LOG 


Format 


Description 


Example 


/NODE 


Format 


Description 


ACCOUNTING 
[LOG 


Outputs informational messages. 


/LOG 


The /LOG qualifier outputs these informational messages to the current 
SYS$OUTPUT device: 


e For each file processed, the name of the file and the number of records 
selected and rejected from that file 


e If you use the /SORT qualifier, the total number of records merged in the 
sort (this is the total number of records selected from all the files that were 
processed) 


¢ If you process more than cne file, the total number of files that were 
processed, and the total number of records selected and rejected 


$ ACCOUNTING MYFILE1.DAT,MYFILE2.DAT /TYPE=PRINT /SORT=USER /OUTPUT=OUTFILE 


%ACC-I-INPUT, SYSSSYSROOT: [SYSMGR]MYFILE1.DAT;7, 297 selected, 16460 rejected 
%ACC-I-INPUT, SYSSSYSROOT: [SYSMGR]MYFILE2.DAT;13,302 selected, 16388 rejected 
tACC-I-MERGE, 599 records to be merged 

$ACC-I-TOTAL, 599 selected, 32848 rejected, 2 input files 


This example processes two accounting files. It writes a brief report of all the 
records for print jobs, sorted in user name order, to an output file and displays 
informational messages that tell you which files were processed and how many 
records were selected and rejected. 


Selects or rejects records for DECnet for OpenVMS requests made by the specified 
nodes. 


/NODE=([-]node_namef,...]) 


The /NODE qualifier uses the value of the remote node name field to select 
records for processing. This field is present in all records except file backward 
link and file forward link records. For records that contain information about 
DECnet for OpenVMS requests, it contains the name of the node that made the 
request. 


The /NODE qualifier selects only records that have the specified values in the 
remote node name field. If you precede the values with a minus sign, it selects all 
records except those with the specified values. 
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/NODE 


Examples 


/OUTPUT 


Format 


Description 


Examples 
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Do not include the double colon (::) after the name of the node. 


See also the /ADDRESS and /REMOTE_ID qualifiers, which select or reject 
records for DECnet for OpenVMS requests made by specified node addresses and 
remote IDs respectively. 


1. $ ACCOUNTING /NODE=HQ291 /FULL 


This example processes the file SYSSMANAGER:ACCOUNTNG.DAT. It 
produces a full report of all records for DECnet for OpenVMS requests made 
by the node HQ291. 


2. $ ACCOUNTING /NODE=(-HQ222,HQ223) 


This example processes the file SYS$MANAGER:ACCOUNTNG.DAT. It 
produces a brief report of all records except those for DECnet for OpenVMS 
requests made by the nodes HQ222 or HQ223. 


Specifies the output file. 


Requires READ and WRITE access to the directory in which the output file is 
created. 


/OUTPUT[=filespec] 


The /OUTPUT qualifier creates the specified output file and writes the report or 
copies the selected records to that file. 


If you omit the /OUTPUT qualifier, or you use the /OUTPUT qualifier and omit 
the file specification, the report or selected records are output to the current 
SYS$OUTPUT device. 


If the file specification does not include the device or directory name, your current 
default device or directory is used. If you omit the file name, the file name of the 
first input file is used (the first file listed in the parameter to the ACCOUNTING 
command). If you omit the file type, the default file type is .LIS if you are 
producing reports, and .DAT if you are copying records. 


1. $ ACCOUNTING MYFILE1.DAT,MYFILE2.DAT /SORT=USER /BINARY /OUTPUT=.NEW 


This example creates the output file MYFILE1.NEW in the default directory. 
It processes two accounting files, MYFILE1.DAT and MYFILE2.DAT, sorting 
their records in user name order, then copies these records to the new output 
file. 


/OWNER 


Format 


Description 


Example 


/PRIORITY 


Format 


Description 


ACCOUNTING 
/OUTPUT 


2. $ ACCOUNTING MYFILE1.NEW /FULL /OUTPUT=MYDISK: [ACCOUNTING ]STAT 


This example creates the output file MYDISK:[ACCOUNTING]STAT.LIS, and 
writes a full report of all the records in MYFILE1.NEW to the new output 
file. 


Selects or rejects records for subprocesses created by the specified processes. 


/OWNER=([-Jowner_pidf,...]) 


The /OWNER qualifier uses the value of the process owner field to select records 
for processing. This field is present in all records except file backward link 

and file forward link records. For a subprocess, this field contains the process 
identification (PID) of the process that created it. 


The /OWNER qualifier selects only records that have the specified values in the 
process owner field. If you precede the values with a minus sign, it selects all 
records except those with the specified values. 


See also the ADENT qualifier, which selects or rejects records for specified 
processes. 


$ ACCOUNTING /OWNER=(25634,045A6B) 


This example processes the file SYS$MANAGER:ACCOUNTNG.DAT. It produces 
a brief report of all records for subprocesses created by processes with a PID of 
25634 or 045A6B. 


Selects or rejects records for the specified priority. 


/PRIORITY=([-Jpriorityf,....]) 


The /PRIORITY qualifier uses the value of the priority field to select records 
for processing. This field is present in all records except file backward link and 
file forward link records. For print and batch job records, this field contains the 
priority of the job in the print or batch queue. For other records, it contains the 
base process priority. 


The /PRIORITY qualifier selects only records that have the specified values in the 
priority field. If you precede the values with a minus sign, it selects all records 
except those with the specified values. 
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/PRIORITY 


Example 


/PROCESS 


Format 


Keyword 


Description 


Example 
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$ ACCOUNTING /PRIORITY=3 


This example processes the file SYSS$MANAGER:ACCOUNTNG.DAT. It produces 
a brief report of all records for processes with a base priority of 3 and for print 
and batch jobs with a queue priority of 3. 


Selects or rejects records for the specified types of process. 
/PROCESS=([—]process_typef,...]) 


process _type,...] 
Specifies which types of process you want to select or reject. This table shows the 
keywords available. 


Keyword Type of Process 

BATCH Batch process 

DETACHED Detached process 

INTERACTIVE Interactive process 

NETWORK Network process 

SUBPROCESS Subprocess of any of the other process types 


The /PROCESS qualifier uses the value of the process type field to select records 
for processing. This field is present only in records of type IMAGE and type 
PROCESS. For records of type IMAGE, this field contains the type of the process 
in which the image was executed. 


The /PROCESS qualifier selects only records that match the specified types of 
process. If you precede the list with a minus sign, it selects all records except 
those for the specified types of process. 


See also the /TYPE qualifier, which selects or rejects specified types of record. 


$ ACCOUNTING /TYPE=IMAGE /PROCESS=INTERACTIVE /FULL 


This example processes the file SYSSMANAGER:ACCOUNTNG.DAT. It produces 
a full report of the resources used by images running in interactive processes. 


ACCOUNTING 
/QUEUE 


/QUEUE 


Selects or rejects records for print or batch jobs executed by the specified queues. 


Format 
/QUEUE=([-]queue_namef],...]) 


Description 


The /QUEUE qualifier uses the value of the queue name field to select records for 
processing. This field is present in all records except file backward link and file 
forward link records. For records that contain information about print or batch 
jobs, it contains the name of the queue that executed the job. 


The /QUEUE qualifier selects only records that have the specified values in the 
queue name field. If you precede the values with a minus sign, it selects all 
records except those with the specified values. 


See also the /JOB and /ENTRY qualifiers, which select or reject records for print 
and batch jobs with specified job names and queue entry numbers respectively. 


Example 


$ ACCOUNTING /QUEUE=SYS$MYNODE_ BATCH 


This example processes the file SYSS$MANAGER:ACCOUNTNG.DAT. It produces 
a brief report of all records for jobs executed by the SYS$MYNODE_BATCH 
queue. 


/REJECTED 


Copies the rejected records to a new file. 


Requires READ and WRITE access to the directory in which the specified file is 
created. 


Format 
/REJECTED=filespec 


Description 
The /REJECTED qualifier creates the specified file, then copies the records 


that do not match your selection criteria to this file in binary format. Use the 
Accounting utility to process this file later. 


If the file specification does not include the device or directory name, your current 
default device or directory is used. If you omit the file name, the file name of the 
first input file is used (the first file listed in the parameter to the ACCOUNTING 
command). If you omit the file type, REJ is used. 
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ACCOUNTING 


/REJECTED 


Example 


$ ACCOUNTING /TYPE=PRINT /BINARY /OUTPUT=PRINT_INFO.DAT - 


_$ /REJECTED=NOT PRINT _INFO.DAT 


This example processes the file SYS$+MANAGER:ACCOUNTNG.DAT. It creates 
two files, PRINT_INFO.DAT and NOT_PRINT_INFO.DAT, in the default 
directory. It copies print job records to PRINT_INFO.DAT and all other records to 
NOT_PRINT_INFO.DAT. 


/REMOTE_ID 


Format 


Description 


Example 


/REPORT 


Format 
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Selects or rejects records for DECnet for OpenVMS requests made by the specified 
remote IDs. 


/REMOTE_ID=({-]remote_idf,...]) 


The /REMOTE_ID qualifier uses the value of the remote ID field to select records 
for processing. This field is present in all records except file backward link and 
file forward link records. For records that contain information about DECnet for 
OpenVMS requests, this field contains a string that identifies the user who made 
the request. If the remote process was on an OpenVMS node, this is the user 
name of the user at the remote node. 


The /REMOTE_ID qualifier selects only records that have the specified values in 
the remote ID field. If you precede the values with a minus sign, it selects all 
records except those with the specified values. 


See also the /NODE and /ADDRESS qualifiers, which select or reject records 
for DECnet for OpenVMS requests made by nodes with specified names and 
addresses respectively. 


$ ACCOUNTING /NODE=HQ223 /REMOTE ID=SMITH /FULL 


This example processes the file SYS$+MANAGER:ACCOUNTNG.DAT. It produces 
a full report of all the records for DECnet for OpenVMS requests made by user 
SMITH at the node HQ223. 


Specifies the resources that you want to summarize in a summary report. 


/REPORT[=(resourcef,...])] 


Keyword 


Description 


resource{....] 


ACCOUNTING 


/REPORT 


Specifies the resources that you want to summarize in the report. Table 2-4 
shows the keywords available. 


Table 2-4 Resources You Can Summarize in a Summary Report 


Keyword Description How Summarized 
BUFFERED_IO ** Number of buffered I/Os Total 
DIRECT_IO ** Number of direct I/Os Total 
ELAPSED * ** Elapsed time Total 
EXECUTION ** Number of images run by the Total 
process 
FAULTS ** Number of hard and soft page Total 
faults 
GETS * Number of GETs from the file that Total 
was printed 
PAGE_FILE ** Page file usage Maximum 
PAGE_READS ** Number of hard page faults Total 
PAGES * Number of pages printed Total 
PROCESSOR ** Total CPU time used Total 
QIOS * Number of QIOs to the printer Total 
RECORDS Number of accounting file records Total 
processed 
VECTOR_ Vector CPU time used (see the Total 
PROCESSOR ** description of the /FULL qualifier 
for further details) 
VOLUMES ** Number of volumes mounted Total 
WORKING_SET ** Working set size Maximum 


* Present in records of type PRINT 


** Present in records of type IMAGE, LOGFAIL, PROCESS, and SYSINIT 


The RECORDS keyword is the default if you omit either the keywords or the 
/REPORT qualifier. It gives the total number of records for each summary key 


value. 


The /REPORT qualifier specifies the resources that you want to summarize in a 
summary report. The resources are summarized, either as totals or maximum 
values, for each summary key value specified by the /SUMMARY qualifier. 


When a record is processed that does not contain the specified resource field, 
a default value of 0 is used. For example, if you use the PAGES keyword to 


summarize the total pages printed, the value of 0 is used for each record that is 
not of type PRINT. 
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[SINCE 


Format 


Description 


Example 
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Note that the resource usage data stored in records of type IMAGE is a subset of 
the data stored in records of type PROCESS. For example, the CPU time stored 
in a record of type PROCESS includes the CPU time used by the images executed 
by that process. To make sure that you do not count the same resource data twice 
when you are summarizing process resources by totals, use the /TYPE qualifier to 
exclude records of type IMAGE. 


You cannot use the /REPORT qualifier without the /SUMMARY qualifier. 


1. $ ACCOUNTING /SUMMARY=IMAGE /REPORT=(RECORDS, PROCESSOR) 


This example processes the file SYS$MANAGER:ACCOUNTNG.DAT. It 
produces a summary report that shows for each image the number of times it 
was executed and the total CPU time consumed. 


2. $ ACCOUNTING /TYPE=-IMAGE /SUMMARY=USER /REPORT=EXECUTION 


This example processes the file SYSSMANAGER:ACCOUNTNG.DAT. It 
produces a summary report that shows the total number of images executed 
by each user. Notice the use of the /TYPE qualifier to exclude records of type 
IMAGE to avoid double counting. 


Selects all records time-stamped at or after the specified time. 


/SINCE[=time] 


All records in an accounting file are time-stamped with the time the record was 
logged in the file. 


The /SINCE qualifier selects only the records time-stamped at or after the 
specified time. You can specify an absolute time, delta time, or a combination of 
the two. If you omit the time, 00:00 hours on the current day is used. 


See also the /BEFORE qualifier, which selects records time-stamped before a 
specified time. 


$ ACCOUNTING /SINCE=5-NOV-1994 


This example produces a brief report of all records time-stamped at or after 
5-NOV-1994 in the file SYS$MANAGER:ACCOUNTNG.DAT. 


[SORT 


Format 


Keyword 


Sorts the selected records. 


/SORT[=([-]sort_field[,...])] 


sort_field[,...] 
Specifies the sort key. 


ACCOUNTING 
[SORT 


This table shows the keywords available. You can specify up to ten sort fields. 


Keyword 


ACCOUNT 
ADDRESS 


BUFFERED_IO 
DIRECT_IO 
ELAPSED 
ENTRY 
EXECUTION 
FAULTS 
FINISHED 
GETS 

IDENT 

IMAGE 


JOB 
NODE 


OWNER 
PAGE_FILE 
PAGE_READS 
PAGES 
PRIORITY 
PROCESS 
PROCESSOR 
QIOS 
QUEUE 
QUEUED 
STARTED 
STATUS 


Sorts on this Field 


Account 


Address of the node that made the DECnet for 
OpenVMS request 


Number of buffered I/Os 

Number of direct I/Os 

Elapsed time 

Print or batch job queue entry number 
Number of images run by the process 

Number of hard and soft page faults 

Time record was logged in the accounting file 
Number of GETs from the file that was printed 
Process identification (PID) 


Image name (sorts only on file name portion of the 
image file specification) 


Name of print or batch job 


Name of the node that made the DECnet for 
OpenVMS request 


PID of parent process 

Peak page file usage 

Number of hard page faults 
Number of pages printed 

Base process priority, or print or batch queue priority 
Type of process 

Total CPU time used 

Number of QIOs to the printer 
Name of print or batch queue 
Time print job was queued 
Start time 

Final exit status code 
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Keyword Sorts on this Field 
TERMINAL Terminal name 

TYPE Type of record 

VIC User identification code 
USER User name at local node 


VECTOR_PROCESSOR Vector CPU time (see the description of the /FULL 


qualifier for further details) 
VOLUMES 
WORKING_SET 


Number of volumes mounted 
Peak working set size 


For each keyword, see the description of the corresponding Accounting utility 
qualifier or Table 2—5 for details of the types of record in which the corresponding 
field is present. 


The /SORT qualifier merges the selected records from each input file (each file 
listed in the parameter to the ACCOUNTING command) and sorts them using 
the specified sort key. The records are sorted according to the value of the first 
sort field in the list, and when two or more records have the same value in this 
field, they are sorted by the value of the second sort field in the list, and so on. 


The records are sorted in ascending order of the sort field value. If the keyword 
is preceded by a minus sign, the records are sorted in descending order. 


When you use the /SORT qualifier, records are rejected if they do not contain the 
sort field. For example, /SORT=IMAGE rejects all records that are not of type 
IMAGE, because the image name field is only present in records of type IMAGE. 
Similarly, /SORT=PAGES rejects all records except those for print jobs. 


You cannot use the /SORT qualifier with the (SUMMARY qualifier. 


1. $ ACCOUNTING /TYPE=PRINT /SORT=USER 


This example processes the file SYS$MANAGER:ACCOUNTNG.DAT. It 
produces a brief report of all the records for print jobs and displays them in 
user name order. 


The following is an example of the report that is produced: 


Date / Time Type Subtype Username ID Source Status 

14-SEP-1994 09:53:05 PRINT BROWN 20A00193 00040001 
13-SEP-1994 13:36:04 PRINT BROWN 20A00442 00000001 
13-SEP-1994 12:42:37 PRINT BROWN 20A00442 00000001 
13-SEP-1994 14:43:56 PRINT DECNET MAIL 20A00456 00000001 
14-SEP-1994 19:39:01 PRINT DECNET MAIL 20A00265 00000001 
14-SEP-1994 20:09:03 PRINT DECNET MAIL 20A00127 00000001 
14-SEP-1994 20:34:45 PRINT DECNET MAIL 20A00127 00000001 
14-SEP-1994 11:23:34 PRINT FISH — 20A0032E 00040001 
14-SEP-1994 16:43:16 PRINT JONES 20A00070 00040001 
14-SEP-1994 09:30:21 PRINT SMITH 20A00530 00040001 


STATUS 


Format 


Description 


Example 


/SUMMARY 


Format 


Keyword 


ACCOUNTING 
[SORT 


2. $ ACCOUNTING MYFILE1.DAT,MYFILE2.DAT /SORT=IMAGE - 
_$ /FULL /REJECTED=NON_IMAGE.DAT 


This example processes two files, MYFILE1.DAT and MYFILE2.DAT, to 
produce a full report of records of type IMAGE, sorted in image name order. 
It creates the file NON_IMAGE.DAT, and copies all records except those of 
type IMAGE to that file. Notice that no selection qualifiers are used, and so 
all records are selected for processing. When the records are sorted, records 
that do not contain an image name are rejected. 


Selects or rejects records with the specified final exit status codes. 


/STATUS=([-]status_codef,...]) 


The /STATUS qualifier uses the value of the final status code field to select 
records for processing. This field is present in all records except records of type 
USER, file backward link records, and file forward link records. 


The /STATUS qualifier selects only records that have the specified values in the 
final status code field. If you precede the values with a minus sign, it selects all 
records except those with the specified values. 


See the description of the /BRIEF qualifier for details of how to convert a final 
exit status code to the equivalent message text. 


$ ACCOUNTING /STATUS=10D38064 


This example processes the file SYS$S$MANAGER:ACCOUNTNG.DAT. It produces 
a brief report of all records with a final exit status code of 10D38064. 


Produces a summary report of the selected records. 


/SUMMARY[=(summary_iten[,...])] 


summary_item[,...] 
Specifies the summary key. This table shows the keywords available: 
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Keyword Description 

ACCOUNT Account 

DATE Date 

DAY Day of month (1-31) 

HOUR Hour of day (0-23) 

IMAGE Image name (file name portion of image file specification) 

JOB Name of print or batch job 

MONTH Month of year (1-12) 

NODE Name of the node that issued the DECnet for OpenVMS 
request 

PROCESS Process type 

QUEUE Print or batch job queue name 

TERMINAL Terminal name 

TYPE Record type 

UIC User identification code 

USER User name 

WEEKDAY Day of week (0=Sunday, 1=Monday, and so on) 

YEAR Year 


If you omit these keywords, the user name is used as the summary key. 


The /SUMMARY qualifier produces a summary report of the selected records. 
The report is directed to the current SYS$OUTPUT device, unless you use the 
/OUTPUT qualifier to write it to a file. 


Summary reports give statistical summaries of the resources specified by 

the /REPORT qualifier for each value of the summary key specified by the 
/SUMMARY qualifier. If you omit the /REPORT qualifier, the summary report 
gives the total number of records processed for each summary key value. 


The first line of the summary report shows the time span of the data processed 
(when the first and last records processed were logged in the input files), with a 
title in the middle. You can use the /TITLE qualifier to specify your own title. 


The next few lines of the report are column headings. There is one column for 
each summary_item, then one column for each resource specified by the /REPORT 
qualifier. The columns are laid out in the same left-to-right sequence as the 
equivalent keywords in the /SUMMARY and /REPORT qualifiers. 


The rest of the report uses one line for each summary key value. It gives a 
summary of the resources associated with that summary key value. The data is 
sorted in ascending order of the summary key value. 


See also the /BINARY qualifier, which copies the selected records to a file, and the 
/BRIEF and /FULL qualifiers, which produce brief and full reports of the selected 
records. 


You cannot use the /SUMMARY qualifier with the /BINARY, /BRIEF, or /FULL 
qualifiers, 


Examples 


/TERMINAL 


Format 


1. 


ACCOUNTING 
/SUMMARY 


$ ACCOUNTING /TYPE=PRINT /SUMMARY=USER /REPORT=( PAGES, RECORDS) 


This example processes the file SYSS$MANAGER:ACCOUNTNG.DAT. It 
processes all the print job records and produces a summary report that shows, 
for each user, the total number of pages printed and the number of records 
that were added together to produce this total. This is an example of the 
report that is produced: 


From: 12-SEP-1994 15:55 VMS Accounting Report To: 15-SEP-1994 15:17 


Username Pages Total 
Printed Records 


BROWN 115 2 
CROW 3 1 
CUTHBERT 20 4 
FOSTER 46 1 
SMITH 50 3 
WHITE 50 7 


$ ACCOUNTING /SUMMARY=IMAGE /REPORT=(PROCESSOR, RECORDS) 


This example processes the file SYSSMANAGER:ACCOUNTNG.DAT. It 
produces a summary report that shows the total CPU time used by each 
image. This is an example of the report that is produced: 


From: 12-SEP-1994 15:55 VMS Accounting Report To: 15-SEP-1994 15:17 


Image name Processor Total 
Time Records 

0 00:09:09.83 5 

ACC 0 00:01:36.72 99 
AUTHORIZE 0 00:00:04.17 8 
CDU 0 00:00:33.25 21 
COPY 0 00:00:05.97 30 
DELETE 0 00:00:02.79 12 
DIRECTORY 0 00:00:09.67 38 
DUMP 0 00:00:04.51 3 
EDT 0 00:00:05.85 7 
LOGINOUT 0 00:04:03.48 75 
NETSERVER 0 00:00:00.63 23 
SHOW 0 00:00:04.80 22 


Selects or rejects records for interactive sessions at the specified terminals. 


/TERMINAL=([-]terminal_namef{,...]) 
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ACCOUNTING 


/TERMINAL 


Description 


Example 


/TITLE 


Format 


Description 


Example 


TYPE 


Format 
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The /TERMINAL qualifier uses the value of the terminal name field to select 
records for processing. This field is present in all records except file backward 
link and file forward link records. For records that contain information about 
interactive sessions, this field contains the name of the terminal associated with 
the session. 


The /TERMINAL qualifier selects only records that have the specified values in 
the terminal name field. If you precede the values with a minus sign, it selects 
all records except those with the specified values. 


Give the terminal name as the standard device name and include the colon (:). 


$ ACCOUNTING /TERMINAL=TTB3: 


This example processes the file SYSS$MANAGER:ACCOUNTNG.DAT. It produces 
a brief report of all records for interactive sessions at the terminal TTB3. 


Specifies the title shown on the first line of a summary report. 


/TITLEs=title 


The /TITLE qualifier specifies the title shown in the center of the first line of 
summary reports. The title is truncated if it is too long. For reports displayed on 
your screen, the title is truncated if it is longer than (W - 56) characters, where 
W is the width (in characters) of your screen. 


$ ACCOUNTING /SUMMARY=IMAGE /TITLE="June Accounting Report" 


This example processes the file SYS$MANAGER:ACCOUNTNG.DAT. It produces 
a summary report that shows the number of times each image was executed. The 
title "June Accounting Report” appears at the top of the report. 


Selects or rejects the specified types of record. 


/TYPE=([-]record_typef,...]) 


Keyword 


Description 


Examples 


record_type[,...] 
Specifies the types of record that you want to select or reject. Table 2-5 shows 
the keywords available. 


ACCOUNTING 
ITYPE 


Table 2-5 Types of Record in an Accounting File 


Keyword 
FILE 


IMAGE 
LOGFAIL 
PRINT 


PROCESS 


SYSINIT 


UNKNOWN 


USER 


Type of 
Record 


FILE_BL 


FILE_FL 


IMAGE 
LOGFAIL 
PRINT 


PROCESS 


SYSINIT 


USER 


Description of Record 


File backward link. This is the first record in 
the accounting file. It is logged when the file is 
created, and contains the name of the previous 
accounting file. 


File forward link. This is the last record in the 
file. It is logged when the file is closed, and 
contains the name of the next accounting file. 


Image termination. It contains details of the 
resources used by the image. 

Failed attempt to log in. It contains details of the 
resources used by the login attempt. 

Print job termination. It contains details of the 
resources used by the print job. 

Process termination. It contains details of 

the resources used by the process. Note that 

this includes the resources used by the images 
executed by that process. 

System booted. It contains details of resources 
used to boot the system. 

Record not recognized as one of the other types in 
this table. 

Record logged by a program calling the $SNDJBC 
system service to send an accounting message. 


All records in an accounting file contain a type field that contains the type of the 


record. 


The /TYPE qualifier selects the specified types of record. If you precede the list 
with a minus sign, it selects all records except those specified. 


See also the /PROCESS qualifier, which selects or rejects records for particular 
types of process. 


1. $ ACCOUNTING /TYPE=PRINT 


This example processes the file SYS$MANAGER:ACCOUNTNG.DAT. It 
produces a brief report of all records for print jobs. 
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ACCOUNTING 


TYPE 


/UIC 


Format 


Description 


Example 


/USER 


Format 


Description 
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2. §$ ACCOUNTING /TYPE=-PRINT 


This example processes the file SYSS$MANAGER:ACCOUNTNG.DAT. It 
produces a brief report of all records except those for print jobs. 


Selects or rejects records for the specified UICs. 


/UIC=({-Juic[,...]) 


The /UIC qualifier uses the value of the UIC field to select records for processing. 
This field is present in all records except file backward link and file forward link 
records. It contains the value [SYSTEM] for login failure records where the user 
did not give a valid user name. 


The /UIC qualifier selects only records that have the specified values in the UIC 
field. If you precede the values with a minus sign, it selects all records except 
those with the specified values. 


You can specify the UIC in numeric or alphanumeric format, and can use the 
asterisk (*) wildcard character. 


$ ACCOUNTING /UIC=([360,*],[ADMIN,COTTON] ) 


This example processes the file SYS$+MANAGER:ACCOUNTNG.DAT. It produces 
a brief report of all records for users in group number 360 or users whose UIC is 
[ADMIN,COTTON]. 


Selects or rejects records for the specified user names. 


/USER=([—Juser namef....]) 


The /USER qualifier uses the value of the user name field to select records for 
processing. This field is present in all records except file backward link and file 
forward link records. It contains the value <login> for login failure records where 
the user did not give a valid user name. 


The /USER qualifier selects only records that have the specified values in the 
user name field. If you precede the values with a minus sign, it selects all records 
except those with the specified values. 


ACCOUNTING 
/USER 


Examples 


1. $ ACCOUNTING /USER=SMITH 


This example processes the file SYSSMANAGER:ACCOUNTNG.DAT. It 
produces a brief report of all records for the user SMITH. 


2. $ ACCOUNTING /USER=(-SMITH, JONES) 


This example processes the file SYS$MANAGER:ACCOUNTNG.DAT. It 
produces a brief report of all the records except those for the users SMITH 


and JONES. 
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Analyze/Disk_Structure Utility 


ANALYZE/DISK_STRUCTURE Description 


Use the Analyze/Disk_Structure utility (ANALYZE/DISK_STRUCTURE) on a 
regular basis to check disks for inconsistencies and errors, and to recover lost 
files. ANALYZE/DISK_STRUCTURE detects problems on On-Disk Structure 
(ODS) Level 1 or 2 Files—11 disks that were caused by hardware errors, system 
errors, and user errors. 


By using ANALYZE/DISK_STRUCTURE to identify and delete lost files and files 
marked for deletion, you can reclaim disk space. 


ANALYZE/DISK_STRUCTURE performs the verification of a volume or volume 
set in eight distinct stages. During these stages, ANALYZE/DISK_STRUCTURE 
collects information used in reporting errors or performing repairs. However, 
ANALYZE/DISK_STRUCTURE repairs volumes only when you specify the 
/REPAIR qualifier. For a complete description of each of the eight stages, and 
an annotated example of an ANALYZE/DISK_STRUCTURE session, refer to 
Appendix D. 


3.1 Error Reporting and Repair 


You can invoke the Analyze/Disk_Structure utility to operate in any of the 
following three modes: , 


e Error reporting with no repairs 
e Error reporting with repairs 
¢ User-controlled selective repairs 


By default, ANALYZE/DISK_STRUCTURE reports errors, but does not make 
repairs. For example, use the following command to report all errors on device 
DBA1: 


$ ANALYZE/DISK_STRUCTURE DBAI1: 


When you issue this command, ANALYZE/DISK_STRUCTURE runs through 
eight stages of data collection, then, by default, prints a list of all errors and lost 
files to your terminal. One type of problem that ANALYZE/DISK_STRUCTURE 
locates is an invalid directory backlink; a backlink is a pointer to the directory 
in which a file resides. If your disk has a file with an invalid directory backlink, 
ANALYZE/DISK_STRUCTURE displays the following message and the file 
specification to which the error applies: 


tVERIFY-I-BACKLINK, incorrect directory back link [SYSEXE]SYSBOOT.EXE;1 


To instruct ANALYZE/DISK_STRUCTURE to repair the errors that it detects, 
use the /REPAIR qualifier. For example, the following command reports and 
repairs all errors on the DBA1 device: 


$ ANALYZE/DISK_STRUCTURE DBA1:/REPAIR 


If you want to select which errors ANALYZE/DISK_STRUCTURE repairs, use 
both the /REPAIR and /CONFIRM qualifiers: 


$ ANALYZE/DISK_STRUCTURE DBA1:/REPAIR/CONFIRM 


ANALYZE/DISK_STRUCTURE Description 


When you issue this command, ANALYZE/DISK_STRUCTURE displays a 
description of each error and prompts you for confirmation before making 
a repair. For example, the previous command might produce the following 
messages and prompts: 


$VERIFY-I-BACKLINK, incorrect directory back link [SYS0]SYSMAINT.DIR;1 
Repair this error? (Y or N): Y 


$VERIFY-I-BACKLINK, incorrect directory back link 
[ SYSEXE ]SYSBOOT.EXE;1] 


Repair this error? (Y or N): N 


Consider running ANALYZE/DISK_STRUCTURE twice for each volume. First, 
invoke the utility to report all errors. Evaluate the errors and decide on an 
appropriate action. Then invoke the utility again with the /REPAIR qualifier 
to repair all errors, or with the /REPAIR and /CONFIRM qualifiers to repair 
selected errors. 


For message descriptions, use the online Help Message (MSGHLP) utility or refer 
to the OpenVMS system messages documentation. 


3.1.1 Recovering Lost Files 
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A lost file is a file that is not linked to a directory. Under normal circumstances, 
files do not become lost. However, files occasionally become lost because of disk 
corruption, hardware problems, or user error. For example, in cleaning up files 
and directories, you might inadvertently delete directories that still point to 
files. When you delete a directory file (a file with the file type .DIR) without first 
deleting its subordinate files, the files referred to by that directory become lost 
files. Though lost, these files remain on the disk and consume space. 


When you run ANALYZE/DISK_STRUCTURE specifying the /REPAIR qualifier, 
the utility places lost files in SYSLOST.DIR. 


For example, to report and repair all errors and lost files found on the device 
DDAQO, issue the following command: 


$ ANALYZE/DISK STRUCTURE/REPAIR/CONFIRM DDAQ: 


If it discovers lost files on your disk, ANALYZE/DISK_STRUCTURE issues 
messages similar to those that follow: 


SVERIFY-W-LOSTHEADER, file (16,1,1) []X.X;1 

not found in a directory 
SVERIFY-W-LOSTHEADER, file (17,1,1) []Y¥.Y;1l 

not found in a directory 
$VERIFY-W-LOSTHEADER, file (18,1,1) []2.2;1 

not found in a directory 
SVERIFY-W-LOSTHEADER, file (19,1,1) []X.X;2 

not found in a directory 
SVERIFY-W-LOSTHEADER, file (20,1,1) []Y.¥;2 

not found in a directory 
$VERIFY-W-LOSTHEADER, file (21,1,1) []Z.;1 

not found in a directory 
$VERIFY-W-LOSTHEADER, file (22,1,1) []2.32 

not found in a directory 
$VERIFY-W-LOSTHEADER, file (23,1,1) LOGIN.COM;163 

not found in a directory 
SVERIFY-W-LOSTHEADER, file (24,1,1) MANYACL.COM;1 

not found in a directory 


All lost files in this example are automatically moved to SYSLOST.DIR. 


ANALYZE/DISK_STRUCTURE Description 


3.1.2 ANALYZE/DISK_STRUCTURE Output 


By default, the Analyze/Disk_Structure utility directs all output to your terminal. 
If you prefer, you can use the /LIST qualifier to generate a file containing the 
following information for each file on the disk: 


e File identification (FID) 

e File name 

¢ Owner 

e Errors associated with the file 


To generate a disk usage accounting file, use the /USAGE qualifier. The first 
record of the file, called the identification record, contains a summary of disk 
and volume characteristics. The identification record is followed by a series of 
summary records; one summary record is created for each file on the disk. A 
summary record contains the owner, size, and name of the file. 


For more information on the disk usage accounting file, see Appendix E. 


ANALYZE/DISK_STRUCTURE Usage Summary 


Format 


The Analyze/Disk_Structure utility checks the readability and validity of Files—11 
Structure Level 1 and Structure Level 2 disk volumes, and reports errors and 
inconsistencies. 


You can detect most classes of errors by invoking the utility once and using its 
defaults. 


ANALYZE/DISK_STRUCTURE  device-name:[/qualifier] 


Parameter 


device-name 

Specifies the disk volume or volume set to be verified. If you specify a volume 
set, all volumes of the volume set must be mounted as Files—11 volumes. For 
information on the Mount utility, refer to the OpenVMS System Management 
Utilities Reference Manual: M-Z. 


Usage Summary 
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Use the following command to invoke the utility: 
ANALYZE/DISK_STRUCTURE device-name: /qualifiers 


To terminate an ANALYZE/DISK_STRUCTURE session, press Ctrl/C or Ctrl/Y 
while the utility executes. You cannot resume a session by using the DCL 
command CONTINUE. 


By default, ANALYZE/DISK_STRUCTURE directs all output to your terminal. 
Use the /USAGE or /LIST qualifiers to direct output to a file. 


To repair a disk effectively, you must have read, write, and delete access to all 
files on the disk. To effectively scan a disk (-ANOREPAIR), you must have read 
access to all files on the disk. 


For a complete explanation of file access, see the Security Guide. 


You can safely use ANALYZE/DISK_STRUCTURE on a disk that is concurrently 
being used for other file operations. If you specify /REPAIR, the utility locks 
the volume before performing any operations; this blocks volume modification. 
Because other users cannot create, delete, extend, or truncate files, repair 
operations are unimpeded and the volume is left in a consistent state. 


If you specify /NOREPAIR, the volume is not locked; the utility does not attempt 
to write to the disk. However, if users perform file operations while you run the 
utility, you may receive error messages that incorrectly indicate file damage. 

To avoid this problem, Digital recommends that you run ANALYZE/DISK_ 
STRUCTURE when the disk is in a quiescent state. 


ANALYZE/DISK_STRUCTURE 


ANALYZE/DISK_STRUCTURE Qualifiers 


This section describes and provides examples of each Analyze/Disk_Structure 
qualifier. Table 3-1 summarizes the qualifiers. 


Table 3-1 Analyze/Disk_Structure Qualifiers 


Qualifier Description 

/[NO]JCONFIRM Determines whether the Analyze/Disk_Structure 
utility prompts you to confirm each repair 

/LNOJLIST[=filespec] Determines whether the Analyze/Disk_Structure 
utility produces a listing of the index file 

/INOJOUTPUT(=filespec] Specifies the output file to which the Analyze/Disk_ 
Structure utility writes the disk structure errors 

/[LNOJREAD_CHECK Determines whether the Analyze/Disk_Structure 


utility performs a read check of all allocated blocks on 
the specified disk 


/RECORD_ATTRIBUTES Determines whether the Analyze/Disk_Structure 
utility repairs files containing erroneous settings in 
the record attributes section of their associated file 
attribute block (FAT) 


/[NO]JREPAIR Determines whether the Analyze/Disk_Structure 
utility repairs errors that are detected in the file 
structure of the specified device 


/USAGE|=filespec] Specifies that a disk usage accounting file should be 
produced, in addition to the other specified functions of 
the Analyze/Disk_Structure utility 


/[NO]CONFIRM 


Format 


Description 


Example 


Determines whether the Analyze/Disk_Structure utility prompts you to confirm 
each repair. If you respond with Y or YES, the utility performs the repair. 
Otherwise, the repair is not performed. 


/[NOJCONFIRM 


You can only use the /CONFIRM qualifier with the /REPAIR qualifier. The 
default is /NOCONFIRM. 


$ ANALYZE/DISK_ STRUCTURE DBAO: /REPAIR/CONFIRM 

$VERIFY-I-BACKLINK, incorrect directory back link [SYS0]SYSMAINT.DIR;1 
Repair this error? (Y or N): Y 

$VERIFY-I-BACKLINK, incorrect directory back link [SYSEXE]SYSBOOT.EXE;1 
Repair this error? (Y or N): N 


The command in this example causes the Analyze/Disk_Structure utility to 
prompt you for confirmation before performing the indicated repair operation. 
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ANALYZE/DISK_STRUCTURE 
/[NO]LIST[=filespec] 


/[NO]LIST[=filespec] 


Format 


Description 


Example 


Determines whether the Analyze/Disk_Structure utility produces a listing of the 
index file. 


/LIST[=filespec] 
/NOLIST 


If you specify /LIST, the utility produces a file that contains a listing of all 

file identifications (FIDs), file names, and file owners. If you omit the file 
specification, the default is SYS$OUTPUT. If you include a file specification 
without a file type, the default type is .LIS. You cannot use wildcard characters in 
the file specification. 


The default is /NOLIST. 


$ ANALYZE/DISK_STRUCTURE DLA2: /LIST=INDEX 
$ TYPE INDEX 

Listing of index file on DLA2: 
31-DEC-1988 20:54:42.22 


(00000001,00001,001) INDEXF.SY 


[ 
(00000002,00002,001) BITMAP.SY 


[ 
(00000004,00004,001) 000000.DI 


[ 
(00000005,00005,001) CORIMG.SY 


S; 
i; 
S; 
(ly 
(00000003,00003,001) BADBLK.SYS; 
1; 
R; 
1, 
S; 
I, 


1 
iL 
1 
1 
1 
1 
1 
1 
1 
1 


] 


$ 
In this example, ANALYZE/DISK_STRUCTURE did not find errors on the device 
DLA2. Because the file INDEX was specified without a file type, the system 


assumes a default file type of .LIS. The subsequent TYPE command displays the 
contents of the file INDEX.LIS. 


/[[NOJOUTPUT 
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Specifies the output file to which the Analyze/Disk_Structure utility is to write 
the disk structure errors. 


Format 


Description 


ANALYZE/DISK_STRUCTURE 
/[NOJOUTPUT 


/[NOJOUTPUT[=filespec] 


Specifies the output file for the disk structure errors. If you omit the /OUTPUT 
file specification, output is directed to SYS$OUTPUT. If /NOOUTPUT is specified, 
no disk structure errors are displayed. If the (CONFIRM qualifier is specified, 
output is forced to SYS$OUTPUT regardless of whether this qualifier is used. 


/[NO]READ_CHECK 


Format 


Example 


Determines whether the Analyze/Disk_Structure utility performs a read check 

of all allocated blocks on the specified disk. When the Analyze/Disk_Structure 

utility performs a read check, it reads the disk twice; this ensures that it reads 
the disk correctly. The default is /NOREAD_CHECK. 


/[NO]JREAD_CHECK 


$ ANALYZE/DISK STRUCTURE DMA1:/READ_ CHECK 


The command in this example directs ANALYZE/DISK_STRUCTURE to perform 
a read check on all allocated blocks on the device DMA1. 


/RECORD_ATTRIBUTES 


Format 


Description 


Determines whether the Analyze/Disk_Structure utility repairs files containing 
erroneous settings in the record attributes section of their associated file attribute 
block (FAT). 


/RECORD_ATTRIBUTES 


The /RECORD_ATTRIBUTES qualifier may be used with the /REPAIR qualifier. 
If attribute repair is enabled during the repair phase, erroneous bits will be 
cleared from a file’s record attributes. This action may not correctly set a file’s 
record attributes as it is beyond the scope of this utility to determine their correct 
values. 


It is recommended that system managers do not perform an attribute repair; 
instead they should notify the owners of the files about the inconsistencies 
and have the owners reset the files’ attributes using the SET FILE/RECORD_ 
ATTRIBUTES=({record-attributes}) command. 
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ANALYZE/DISK_STRUCTURE 
/RECORD_ATTRIBUTES 


Example 
$ ANALYZE/DISK_SYS$SYSDEVICE: 
tANALDISK-I-BAD RECATIR, file (2930,1,1) [USER]ATTRIBUTES.DAT; 13 
file record format: Variable 
inconsistent file attributes: Bit 5 
tANALDISK-I-BAD RECATTR, file (2931,1,1) [USER]ATTRIBUTES.DAT;14 
file record format: Variable 
inconsistent file attributes: FORTRAN carriage control, Bit 5 
SANALDISK-I-BAD RECATTR, file (2932,1,1) [USER]ATTRIBUTES.DAT;15 
file record format: Variable 
inconsistent file attributes: Implied carriage control, Bit 5 
SANALDISK-I-BAD RECATTR, file (2933,1,1) [USER]ATTRIBUTES.DAT;16 
file record format: Variable 
inconsistent file attributes: Non-spanned, Bit 5 
tANALDISK-I-BAD RECATTR, file (2934,1,1) [USER]ATTRIBUTES.DAT;17 
file record format: Variable 
inconsistent file attributes: FORTRAN carriage control, 
Non-spanned, Bit 5 
/[NOJREPAIR 
Determines whether the Analyze/Disk_Structure utility repairs errors that are 
detected in the file structure of the specified device. 
Format 
/[NO]REPAIR 
Description 
The Analyze/Disk_Structure utility does not perform any repair operation unless 
you specify the /REPAIR qualifier. The file structure is software write-locked 
during a repair operation. The default is /NOREPAIR. 
Example 
$ ANALYZE/DISK_STRUCTURE DBA1:/REPAIR 
The command in this example causes ANALYZE/DISK_STRUCTURE to perform 
a repair on all errors found in the file structure of device DBA1. 
/USAGE[=filespec] 
Specifies that a disk usage accounting file should be produced, in addition to the 
other specified functions of the Analyze/Disk_Structure utility. 
Format 


/USAGE[=filespec] 
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Description 


Example 


ANALYZE/DISK_STRUCTURE 
/USAGE[=filespec] 


If all or part of the file specification is omitted, ANALYZE/DISK_STRUCTURE 
assumes a default file specification of USAGE.DAT. The file is placed in the 
current default directory. 


$ ANALYZE/DISK STRUCTURE DBA1:/USAGE 
$ DIRECTORY USAGE 


Directory DISKSDEFAULT: [ACCOUNT] 
USAGE. DAT; 3 


Total of 1 file. 


The first command in this example causes ANALYZE/DISK_STRUCTURE to 
produce a disk usage accounting file. Because a file specification was not provided 
in the command line, ANALYZE/DISK_STRUCTURE uses both the default 

file name and directory [ACCOUNTJUSAGE.DAT. The DIRECTORY command 
instructs the system to display all default information. 
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Audit Analysis Utility 


ANALYZE/AUDIT Description 


The Audit Analysis utility (ANALYZE/AUDIT) is a system management tool 
that enables system managers or site security administrators to produce reports 
from security audit log files. Collecting security audit messages is useful only if 
you develop and implement a procedure to periodically review the audit log file 
for suspicious activity. Use ANALYZE/AUDIT to examine the data in security 

- audit log files or security archive files. This utility replaces the SECAUDIT.COM 
command procedure that was included in versions of the VAX VMS operating 
system prior to Version 5.2. 


The ANALYZE/AUDIT command’s different qualifiers allow you to specify the 
type of information the utility extracts from the security audit log file. The utility 
can produce an audit report in a variety of formats and direct a report to a file or 
a terminal. 


A description of the format of the auditing messages written to the security 
auditing file appears in Appendix F (VAX systems) and Appendix G (AXP 
systems). 


For more information on how to use ANALYZE/AUDIT, see the Security Guide. 
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ANALYZE/AUDIT Usage Summary 


Format 


The Audit Analysis utility (ANALYZE/AUDIT) processes event messages in 
security audit log files to produce reports of security-related events on the system. 


ANALYZE/AUDIT _ [file-spec[,...]] 


Parameter 

file-specyj,...] 

Specifies one or more security audit log files as input to ANALYZE/AUDIT. If you 
specify more than one file name, separate the names with commas. 


If you omit the file-spec parameter, the utility searches for the default audit log 
file: 


SECURITY.AUDIT$JOURNAL (VAX only) 
SECURITY_AUDIT.AUDIT$JOURNAL (AXP only) 


The default audit log file is created in the SYSSCOMMON:[SYSMGR] directory. 
To use the file, specify SYS$MANAGER on the ANALYZE/AUDIT command line. 
If you do not specify a directory, the utility searches for the file in the current 
directory. 


You can include wildcard characters, such as the asterisk (*) or percent sign (%), 
in the file specification. 


The audit log file can be located in any directory. To display the current location, 
use the DCL command SHOW AUDIT/ALL. 


Usage Summary 
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Use the DCL command ANALYZE/AUDIT to analyze security audit log files or 
security archive files. An ANALYZE/AUDIT command line can specify the name 
of one or more log files, as follows: 


ANALYZE/AUDIT [file-spec....] 


You can also use the ANALYZE/AUDIT command to extract security event 
messages from security archive files or from binary files (created with previous 
ANALYZE/AUDIT commands). 


Each ANALYZE/AUDIT request runs until the log file is completely processed. 
You can interrupt the processing to modify the display or to change position in 
the report if you activate command mode by pressing Ctrl/C. To terminate an 
ANALYZE/AUDIT request before completion, press Ctrl/Z. 


You can direct ANALYZE/AUDIT output to any supported terminal device or 
to a disk or tape file by specifying the file specification as an argument to the 
/OUTPUT qualifier. By default, the output is directed to SYS$OUTPUT. 


Use of ANALYZE/AUDIT requires no special privileges other than access to the 
files specified in the command line. 


ANALYZE/AUDIT 


ANALYZE/AUDIT Qualifiers 


/BEFORE 


Format 


Keyword 


This section describes ANALYZE/AUDIT and provides examples of each qualifier. 
Table 4-1 summarizes the ANALYZE/AUDIT qualifiers. 


Table 4-1 ANALYZE/AUDIT Qualifiers 


Qualifier Description 

/BEFORE Controls whether records dated earlier than the specified time 
are selected 

/BINARY Controls whether output is a binary file 

/BRIEF Controls whether a brief, single-line record format is used in 
ASCII displays 

/EVENT_TYPE Selects the classes of events to be extracted from the security 
log file 

/FULL Controls whether a full format is used in ASCII displays 

AGNORE Excludes records from the report that match the specified 
criteria 

/JINTERACTIVE Controls whether interactive command mode is enabled when 
the Audit Analysis utility is invoked 

/OUTPUT Specifies where to direct output from the Audit Analysis utility 

/PAUSE Specifies the length of time each record is displayed in a full 
format display 

/SELECT Specifies the criteria for selecting records 

/SINCE Indicates that the utility must operate on records dated with 
the specified time or after the specified time 

/SUMMARY Specifies that a summary of the selected records be produced 


after all records are processed 


Controls whether records dated earlier than the specified time are selected. 


/BEFORE[=time] 


/NOBEFORE 


time 


Specifies the time used to select records. Records dated earlier than the specified 
time are selected. You can specify an absolute time, delta time, or a combination 

of the two. Observe the syntax rules for date and time described in the OpenVMS 
User’s Manual. 
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ANALYZE/AUDIT 


/BEFORE 


Description 


Examples 


/BINARY 


Format 


Keywords 


Description 


Example 


By default, all records in the security audit log file may be examined. You must 
specify /BEFORE to exclude records created after a specific point in time. 


1. $ ANALYZE/AUDIT /BEFORE=25-NOV-1993 - 
_$ SYSS$MANAGER: SECURITY .AUDITS$JOURNAL 


The command in this VAX system example selects all records dated earlier 
than November 25, 1993. 


2. $ ANALYZE/AUDIT /BEFORE=14:00/SINCE=12:00 - 
_$ SYSS$MANAGER: SECURITY .AUDITSJOURNAL 


The command in this VAX system example selects all records generated 
between noon and 2 PM. today. 


Controls whether output is a binary file. 


/BINARY 
/NOBINARY 


None. 


When /BINARY is used, the output file specified by using the /OUTPUT qualifier 
contains image copies of the selected input records. If you specify /NOBINARY or 
omit the qualifier, the output file contains ASCII records. 


By default, if you specify /BINARY and do not include the /OUTPUT qualifier, an 
output file named AUDIT.AUDIT$JOURNAL is created. 


The /BINARY, /BRIEF, and /FULL qualifiers cannot be used in combination. 


$ ANALYZE/AUDIT /BINARY/SINCE=TODAY/OUTPUT=25DEC94.AUDIT - 
_$ SYSSMANAGER: SECURITY .AUDITSJOURNAL 


The command in this VAX system example selects all audit records generated 
today and writes the records in binary format to 25DEC94.AUDIT. 


/BRIEF 


Format 


Keywords 


Description 


Example 


ANALYZE/AUDIT 
/BRIEF 


Controls whether a brief, single-line record format is used in ASCII displays. 
/BRIEF (default) 
None. 


By default, records are displayed in the brief format. You must specify /FULL to 
have the full contents of each selected audit event record displayed. 


The /BINARY, /BRIEF, and /FULL qualifiers cannot be used in combination. 


§ ANALYZE/AUDIT /OUTPUT=AUDIT.LIS - 
_$ SYSS$MANAGER: SECURITY .AUDIT$JOURNAL 


The command in this VAX system example produces an ASCII file in brief format 
by default. The report is written to the AUDIT:LIS file. 


/EVENT_TYPE (AXP Only) 





Format 


Keyword 


On AXP systems, selects the classes of events to be extracted from the security 
log file. 


If you omit the qualifier or specify the ALL keyword, the event type is not used to 
select records. 


/EVENT_TYPE=(event-typefJ,...]) 


event type{,...] 
Specifies the classes of events used to select records. You can specify any of the 
following event types: 


[NOJACCESS Access to files and global sections 

[NOJALL All event types 

[NOJAUDIT Use of the SET AUDIT command 

[NO]JBREAKIN Break-in detection 

[NOJINSTALL Modification of the known file list with Install utility 
(INSTALL) 

[NOJLOGFAIL Unsuccessful login attempt 
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/EVENT_TYPE (AXP Only) 


Examples 


[NO]JLOGIN 
[NOJLOGOUT 
[NOJMOUNT 


[NOJNETUAF 


[NOJRIGHTSDB 


[NO]JSYSUAF 


Successful login 
Successful logout 


Execution of DCL commands MOUNT or 
DISMOUNT 


Modification of the network proxy authorization file 
(NETPROXY.DAT) 

Modification of the rights database 
(RIGHTSLIST.DAT) 


Modification of the system user authorization file 
(SYSUAF.DAT) 


Specifying the negated form of an event class (for example, NOLOGFAIL) 
excludes the specified event class from the audit report. 


1 $ ANALYZE/AUDIT/EVENT_TYPE=LOGFAIL - 
_$ SYSS$MANAGER: SECURITY _AUDIT.AUDIT$JOURNAL 


The command in this AXP system example extracts all records of unsuccessful 
login attempts, which match the LOGFAIL class, and compiles a brief report. 


2. $ ANALYZE/AUDIT/EVENT TYPE=(NOLOGIN,NOLOGOUT) - 
_$ SYSSMANAGER: SECURITY AUDIT.AUDIT$ JOURNAL 


The command in this AXP system example builds a report in brief format of 
all audit records except those in the LOGIN and LOGOUT event classes. ¢ 


/EVENT_TYPE (VAX Only) 


<> 


Format 


Keyword 
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On VAX systems, selects the classes of events to be extracted from the security 
log file. If you omit the qualifier or specify the ALL keyword, the utility includes 
all enabled event classes in the report. 


/EVENT_TYPE=(event-type|,...]) 


event typef{,...] 


Specifies the classes of events used to select records. You can specify any of the 


following event types: 


[NOJACCESS 

LNOJALL 

[NOJAUDIT 
[NOJAUTHORIZATION 


[NO]JBREAKIN 


Access to an object, such as a file 
All event types 
Use of the SET AUDIT command 


Change to the authorization database 
(SYSUAF.DAT, NETPROXY.DAT, 
RIGHTSLIST.DAT) 


Break-in detection 


Examples 


[NOJCONNECTION 


[NO]JCREATE 
[NOJDEACCESS 
[NO]DELETE 
[NO]JINSTALL 


[NOJLOGFAIL 
[NOJLOGIN 
[NOJLOGOUT 
[NOJMOUNT 


[NOJNCP 
[NOJNETPROXY 


[NO]PRIVILEGE 
[NOJPROCESS 


[NO]JRIGHTSDB 
[NO]SYSGEN 
[NO]SYSUAF 


[NO|TIME 


ANALYZE/AUDIT 
/EVENT_TYPE (VAX Only) 


Establishment of a network connection 
through OpenVMS System Management 
utility (SYSMAN), DECnet, DECwindows, or 
interprocess communication (IPC) software 


Creation of an object 
Completion of access to an object 
Deletion of an object 


Modification of the known file list with the Install 
utility (INSTALL) 


Unsuccessful login attempt 
Successful login 


Successful logout 


Execution of DCL commands MOUNT or 
DISMOUNT 

Modification of the DECnet network 
configuration databases 

Modification of the network proxy authorization 
file (NETPROXY.DAT) 

Privilege auditing 

Use of one or more of the process control system 
services: $CREPRC, $DELPRC, $SCHDWK, 
$CANWAK, $WAKE, $SUSPND, $RESUME, 
$GRANTID, $REVOKID, $GETJPI, $FORCEX, 
$SETPRI 

Modification of the rights database 
(RIGHTSLIST.DAT) 

Modification of system parameters through the 
System Generation utility (SYSGEN) 


Modification of the system user authorization file 
(SYSUAF.DAT) 


Change in system or cluster time 


Specifying the negated form of an event class (for example, NOLOGFAIL) 
excludes the specified event class from the audit report. 


1 $ ANALYZE/AUDIT/EVENT_TYPE=LOGFAIL - 
_$ SYS$MANAGER: SECURITY. AUDITSJOURNAL 


The command in this VAX system example extracts all records of unsuccessful 
login attempts, which match the LOGFAIL class, and compiles a brief report. 


2. $ ANALYZE/AUDIT/EVENT_TYPE=(NOLOGIN,NOLOGOUT) - 
_5$ SYSSMANAGER: SECURITY .AUDITSJOURNAL 


The command in this VAX system example builds a report in brief format of 
all audit records except those in the LOGIN and LOGOUT event classes. ¢ 
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ANALYZE/AUDIT 


/FULL 


/FULL 


Format 


Keywords 


Description 


Example 


IGNORE 


Format 


Keyword 


Description 
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Controls whether a full format is used in ASCII displays. If you specify /NOFULL 
or omit the qualifier, records are displayed in the brief format. 


/FULL 
/NOFULL (default) 


None. 


By default, records are displayed in the brief format. You must specify /FULL (or 
enter command mode by pressing Ctrl/C) to have the full contents of each selected 
record displayed. 


The /BINARY, /BRIEF, and /FULL qualifiers cannot be used in combination. 


§ ANALYZE/AUDIT /FULL - 
_§ SYS$MANAGER: SECURITY .AUDITSJOURNAL 


The command in this VAX system example displays the full contents of each 
selected record. 


Excludes records from the report that match the specified criteria. 


/AGNORE=criteria[,...] 


criteriaf,...] 

Specifies that all records are selected except those matching any of the specified 
exclusion criteria. See the /SELECT qualifier description for a list of the possible 
criteria to use with the /IGNORE qualifier. 


Use the /IGNORE qualifier to exclude specific groups of audit records from the 
audit report. When more than one keyword from the list of possible exclusion 
criteria are specified, records that meet any of these criteria are excluded by 
default. 


Example 


ANALYZE/AUDIT 
IGNORE 


$ ANALYZE/AUDIT/IGNORE=(SYSTEM=NAME=WIPER, USERNAME=MILANT) - 
_$ SYSS$MANAGER: SECURITY .AUDITSJOURNAL 


The command in this VAX system example excludes from the audit analysis 
report all records in the audit log file generated from node WIPER or from user 
MILANT (on any node). 


[INTERACTIVE 


Format 


Keywords 


Description 


Examples 


Controls whether interactive command mode is enabled when the Audit Analysis 
utility is invoked. 


[INTERACTIVE (default) 
/NOINTERACTIVE 


None. 


Interactive command mode, which is enabled by default, allows you to interrupt 
the audit report being displayed on the terminal and to enter commands either 
to modify the criteria used to select records for the report or to reposition the 
display. 


To interrupt a full or brief audit report, press Ctrl/C and enter commands at 
the COMMAND> prompt. As soon as you enter command mode, the utility 
displays the current record in full format. Note that the record might not match 
the selection or exclusion criteria specified in the previous ANALYZE/AUDIT 
command. 


Enter the CONTINUE command to leave interactive command mode and to 
resume display of the audit report. Enter the EXIT command to terminate the 
session. See the ANALYZE/AUDIT Commands section for a description of each 


interactive command. 


To disable interactive mode, specify /NOINTERACTIVE. In this mode, the utility 
displays audit records one at a time and prompts you to advance the display by 
pressing the Return key. 


1. $ ANALYZE/AUDIT/FULL - 
_$ SYSS$MANAGER: SECURITY . AUDITSJOURNAL 


The command in this VAX system example produces a full format display 

of the selected records. New records are displayed every 3 seconds. (See 
the /PAUSE qualifier description to find how to modify the duration of each 
record display.) Press Ctrl/C to interrupt the display and to enter interactive 
commands. 
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ANTERACTIVE 


/OUTPUT 


Format 


Keyword 


Example 


/PAUSE 


Format 


Keyword 
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2. $ ANALYZE/AUDIT/FULL/NOINTERACTIVE - 
_$ SYSSMANAGER : SECURITY .AUDITSJOURNAL 


The command in this VAX system example invokes the utility in 
noninteractive mode. It displays the first record selected and prompts you 
to press the Return key to display each additional selected record. Control 
returns to the DCL command level when all selected records have been 
displayed. 


Specifies where to direct output from the Audit Analysis utility (ANALYZE 
/AUDIT). If you omit the qualifier, the report is sent to SYS$OUTPUT. 


/OUTPUT[=file-spec] 
/NOOUTPUT 


file-specyj,...] 

Specifies the name of the file that is to contain the selected records. If you 
omit the device and directory specification, the utility uses the current device 
and directory specification. If you omit the file name and type, the default 
file name AUDIT.LIS is used. If the output is binary (BINARY) and you 
omit the /OUTPUT qualifier, the binary information is written to the file 
AUDIT.AUDIT$JOURNAL. 


$ ANALYZE/AUDIT /BINARY/OUTPUT=BIN122588.DAT - 
_$ SYSS$MANAGER: SECURITY . AUDITS$JOURNAL 


The command in this VAX system example selects audit records from the system 
audit log file and writes them to the binary file BIN122588.DAT. 


Specifies the length of time each record is displayed in a full-format display. 


/PAUSE=seconds 


seconds 

Specifies the duration (in seconds) of the full-screen display. A value of 0 specifies 
that the system should not pause before displaying the next record. By default, 
the utility displays a record for 3 seconds. 


Description 


ANALYZE/AUDIT 
/PAUSE 


The /PAUSE qualifier can be used only with full-format (/FULL) displays to 
specify the length of time each record is displayed. By default, each record is 
displayed for a period of 3 seconds. A value of 0 results in a continuous display of 
audit records. 


Example 
$ ANALYZE/AUDIT /FULL/PAUSE=1 - 
_$ SYSSMANAGER: SECURITY .AUDITSJOURNAL 
The command in this VAX system example displays a selected record in full 
format every second. You can interrupt the display and enter interactive 
commands at any time by pressing Ctrl/C. (See the ANALYZE/AUDIT Commands 
section for more information.) 

/SELECT (AXP Only) 

AXP. | On AXP systems, specifies the criteria for selecting records. 

Format 
/SELECT=criterial,...] 
/NOSELECT 

Keyword 
criteria[,...] 


Specifies the criteria for selecting records. 


If you omit the /SELECT qualifier, all event records selected through the 
/EVENT_TYPE qualifier are extracted from the audit log file and included in the 
report. 


You can specify any of the following criteria: 


ACCESS=(type....) 
Specifies the type of object access upon which the selection is based. Valid access 
types are read, write, execute, delete, and control. 


ACCOUNT=(name.,...) 
Specifies the account name upon which selection is based. You can use wildcards, 
such as an asterisk (*) or percent sign (%), to represent all or part of the name. 


DISMOUNT_FLAGS=(flag-name.,...) 

Identifies the names of the volume dismounting flags to be used in selecting 
records. Specify one or more of the following flag names: Abort, Cluster, 
Nounload, and Unit. 


HOLDER=keyword(....) 
Specifies the characteristics of the identifier holder to be used when selecting 
event records. Choose from the following keywords: 
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NAME<=username 


OWNER=uic 


IDENTIFIER=keyword(....) 


Specifies the name of the holder. You can 
represent all or part of the name with a 
wildcard. 


Specifies the user identification code (UIC) 
of the holder. 


Identifies which attributes of an identifier should be used when selecting event 
records. Choose from the following keywords: 


ATTRIBUTES=name 


NAME=identifier 


NEW_NAME<= identifier 


VALUE=value 
NEW_VALUE=value 


IMAGE_NAME=(image-name.,...) 


Specifies the name of the particular 
attribute. Valid attribute names are 
Dynamic and Resource. 


Specifies the original name of the identifier. 
You can represent all or part of the name 
with a wildcard. 

Specifies the new name of the identifier. 
You can represent all or part of the name 
with a wildcard. 

Specifies the original value of the identifier. 


Specifies the new value of the identifier. 


Identifies the name of the image to be used when selecting event records. You can 
represent all or part of the image name with a wildcard. 


LOCAL=(characteristic.,...) 


Specifies the characteristics of the local (proxy) account to be used when selecting 
event records. Characteristics include the following: 


USERNAME<£=username 


LOGICAL_NAME=(logical-name....) 


Specifies the name of the local account. 
You can represent all or part of the name 
with a wildcard. 


Specifies the logical name of the mounted (or dismounted) volume upon which 
selection is based. You can represent all or part of the logical name with a 


wildcard. 


MOUNT_FLAGS=(flag-name.,...) 


Specifies the names of the volume mounting flags upon which selection is based. 
Possible flag names include the following: 


CACHE=(NONE,WRITETHROUGH) 


CLUSTER 


DATACHECK=(READ,WRITE) 


FOREIGN 
GROUP 


INITIALIZATION=(ALLOCATE,CONTINUATION) 


INTERCHANGE 
MESSAGE 
NOASSIST 
NOAUTO 
NODISKQ 
NOHDR3 


ANALYZE/AUDIT 


/SELECT (AXP Only) 
NOLABEL 
NOWRITE 
ACCESSIBILITY 
EXPIRATION 
. IDENTIFICATION 
OVERRIDE =(options[,...]) LOCK 
OWNER_IDENTIFIER 
SETID 
SHARE 
SYSTEM 


OBJECT=keyword(,...) 
Specifies which characteristics of an object should be used when selecting event 
records. Choose any of the following keywords: 


NAME<=object-name Specifies the name of the object. You can 
represent all or part of the name with a 
wildcard. If you do not use a wildcard, 
specify the full object name (for example, _ 
BOSTON$DUA0:[RWOODSJMEMO.MEM;1). 


OWNER=value Specifies the UIC or general identifier of 
the object. 

TYPE=type Specifies the general object class (type 
of object). The available classes are as 
follows: 


e System_global_section 
¢ Group_global_section 


Only audit records generated on an AXP 
system or a VAX system running a version 
of the operating system prior to Version 6.0 
will contain the TYPE criteria. 


PARENT=keyword(,...) 
Specifies which characteristics of the parent process are used when selecting 
event records generated by a subprocess. Choose from the following keywords: 


IDENTIFICATION=value Specifies the process identification (PID) of 
the parent process. 


NAME=process-name Specifies the name of the parent process. 
You can represent all or part of the name 
with a wildcard. 


OWNER=value Specifies the owner (identifier value) of the 
parent process. 
USERNAME=username Specifies the user name of the parent 


process. You can represent all or part of 
the name with a wildcard. 


PRIVILEGES_USED=(privilege-name....) 

Specifies the privileges of the process to be used when selecting event records. 
Specify any of the system privileges, as described in the Security Guide. 

Also include the STATUS keyword in the selection criteria so the report can 
demonstrate whether the privilege was involved in a successful or an unsuccessful 
operation. 
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PROCESS=(characteristic....) 
Specifies the characteristics of the process to be used when selecting event 
records. Choose from the following characteristics: 


IDENTIFICATION=value Specifies the PID of the process. 

NAME=process-name Specifies the name of the process. You can 
represent all or part of the name with a 
wildcard. 


REMOTE=keyword(,...) 
Specifies that some characteristic of the network request is to be used when 
selecting event records. Choose from the following keywords: 


IDENTIFICATION=value Specifies the DECnet node address. 

NODENAME=£=node-name Specifies the DECnet node name. You can 
represent all or part of the name with a 
wildcard. 

USERNAME=username ; Specifies the remote user name. You can 


represent all or part of the remote user 
name with a wildcard. 


STATUS=(type.,...) 
Specifies the type of success status to be used in selecting event records. 


SUCCESSFUL Specifies a generic success class. 
FAILURE Specifies a generic failure class. 
CODE=value Specifies a specific completion status. 


SYSTEM=keyword(,...) . 
Specifies the characteristics of the system to be used when selecting event 
records. Choose from the following keywords: 


IDENTIFICATION=value Specifies the numeric identification of the 
system. 
NAME=nodename Specifies the node name of the system. 


TERMINAL=(device-name.,...) 
Specifies the name of the terminal to be used when selecting event records. You 
can represent all or part of the terminal name with a wildcard. 


USERNAME=(username.,...) 
Specifies the user name to be used when selecting event records. You can 
represent all or part of the user name with a wildcard. 


VOLUME_NAME=(volume-name.,...) 

Specifies the name of the mounted (or dismounted) volume to be used when 
selecting event records. You can represent all or part of the volume name with a 
wildcard. 


VOLUME_SET_NAME=(volume-set-name.,...) 

Specifies the name of the mounted (or dismounted) volume set to be used when 
selecting event records. You can represent all or part of the volume set name 
with a wildcard. 


Examples 


ANALYZE/AUDIT 
/SELECT (AXP Only) 


1. $ ANALYZE/AUDIT /FULL/SELECT=USERNAME=JOHNSON - 
_$ SYSSMANAGER: SECURITY AUDIT.AUDITSJOURNAL 


The command in this AXP system example selects all records written to the 
security audit log file that were generated by user JOHNSON. 


2. $ ANALYZE/AUDIT/FULL/SELECT=PRIVILEGES USED=(SYSPRV,- 
_$ BYPASS) SYS$MANAGER:SECURITY AUDIT.AUDITSJOURNAL 


The command in this AXP system example selects all records written to the 
security audit log file that were generated by events through the use of both 
SYSPRV and BYPASS privileges. ¢ 


SELECT (VAX Only ) 


Format 


Keyword 


On VAX systems, specifies the criteria for selecting records. 


/SELECT=criteria[,...] 
/NOSELECT 


criteria[,...] 
Specifies the criteria for selecting records. For each specified criterion, ANALYZE 
/AUDIT has two selection requirements: 


¢ The packet corresponding to the criterion must be present in the record. 
e One of the specified values must match the value in that packet. 


For example, if you specify the criteria 
(USER=(PUTTERMAN,WU),SYSTEM=DBASE), ANALYZE/AUDIT selects an 
event record containing the SYSTEM=DBASE packet and a USER packet with 
either the PUTTERMAN value or the WU value. 


If you omit the /SELECT qualifier, all event records selected through the 
/EVENT_TYPE qualifier are extracted from the audit log file and included in the 
report. 


You can specify any of the following criteria: 
ACCESS=(type,...) 


Specifies the type of object access upon which the selection is based. Access is 
object-specific and includes the following types: 


Associate Execute Read 

Control Lock Submit 

Create Logical Use 

Delete | Manage Write 
Physical 


The Security Guide describes each of these types. 
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ACCOUNT=(name.,...) 
Specifies the account name upon which selection is based. You can use wildcards, 
such as an asterisk (*) or percent sign (%), to represent all or part of the name. 


ALARM_NAME=(alarm-name.,...) 
Specifies the alarm journal name on which selection is based. You can use 
wildcards to represent all or part of the alarm name. . 


ASSOCIATION_NAME=(IPC-name.,...) 
Specifies the name of the interprocess communication (IPC) association. 


AUDIT_NAME=(journal-name.,...) 
Specifies the audit journal name on which selection is based. You can use 
wildcards to represent all or part of the audit journal name. 


COMMAND_LINE=(comman4d.,...) 
Specifies the command line that the user entered. 


CONNECTION_IDENTIFICATION=(IPC-name.,...) 
Specifies the name for the interprocess communication (IPC) connection. 


DECNET_LINK_IDENTIFICATION=(value,...) 
Specifies the number of the DECnet logical link. 


DECNET_OBJECT_NAME=(object-name.,...) 
Specifies the name of the DECnet object. 


DECNET_OBJECT_NUMBER=(value.,...) 
Specifies the number of the DECnet object. 


DEFAULT_USERNAME=(username.,...) 
Specifies the default local user name for incoming network proxy requests. 


DEVICE_NAME=(device-name.,...) 

Specifies the name of a device in audit records that have a DEVICE_NAME 
packet. Note that this does not select the device name when it occurs in other 
packet types, such as in a file name or in the TARGET_DEVICE_NAME packet. 


DIRECTORY_ENTRY=(directory,...) 
Specifies the directory entry associated with file system operation. 


DIRECTORY_NAME=(directory,...) 
Specifies the name of the directory file. 


DISMOUNT_FLAGS=(flag-name.,...) 

Identifies the names of the volume dismounting flags to be used in selecting 
records. Specify one or more of the following flag names: Abort, Cluster, 
Nounload, and Unit. 


EVENT_CLUSTER_NAME=(event-flag-cluster-name.,...) 
Specifies the name of the event flag cluster. 


FACILITY=(facility-name,...) 

Specifies that only events audited by the named facility be selected. Provide a 
name or a number but, in either case, the facility has to be defined through the 
logical AUDSERV$FACILITY_NAME as a decimal number; the system uses the 
number 0. 


ANALYZE/AUDIT 
/SELECT (VAX Only ) 


FIELD_NAME=(field-name.,...) 

Specifies the name of the field that was modified. ANALYZE/AUDIT uses the 
FIELD NAME criterion with packets containing the original data and the new 
data (specified by the NEW_DATA criterion). 


FLAGS=(flag-name.,...) 

Identifies the names of the audit event flags associated with the audited event. 
These names should be used in selecting records. Specify one or more of the 
following flags: ACL, Alarm, Audit, Flush, Foreign, Internal, and Mandatory. 
(For a description of these flags, see Table F-3.) 


HOLDER=keyword(,...) 
Specifies the characteristics of the identifier holder to be used when selecting 
event records. Choose from the following keywords: 


NAME =username Specifies the name of the holder. You can 
represent all or part of the name with a 
wildcard. 

OWNER=uic Specifies the user identification code (UIC) 
of the holder. 


IDENTIFIER=keyword(,...) 
Identifies which attributes of an identifier should be used when selecting event 
records. Choose from the following keywords: 


ATTRIBUTES=name Specifies the name of the particular 
attribute. Valid attribute names are 
as follows: Dynamic, Holder_Hidden, 
Name_Hidden, No_Access, Resource, and 
Subsystem. 

NAME=identifier Specifies the original name of the identifier. 
You can represent all or part of the name 
with a wildcard. 

NEW_NAME= identifier Specifies the new name of the identifier. 
You can represent all or part of the name 
with a wildcard. 

NEW_ATTRIBUTES=name Specifies the name of the new attribute. 
Valid attribute names are Dynamic, 
Holder_Hidden, Name_Hidden, No_Access, 
Resource, and Subsystem. 

VALUE=value Specifies the original value of the identifier. 


NEW_VALUEs=value Specifies the new value of the identifier. 


IDENTIFIERS_MISSING=(identifier,...) 
Specifies the identifiers missing in a failure to access an object. 


IDENTIFIERS_USED=(identifier,...) 
Specifies the identifiers used to gain access to an object. An event record matches 
if the specified list is a subset of the identifiers recorded in the event record. 


IMAGE_NAME=(image-name....) 
Identifies the name of the image to be used when selecting event records. You can 
represent all or part of the image name with a wildcard. 
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INSTALL=keyword(....) 
Specifies that installation event packets are to be considered when selecting event 
records. Choose from the following keywords: 


FILE=filename Specifies the name of the installed file. You 
can represent all or part of the name with 
a wildcard. 
Note that on AXP systems and versions 
of VAX systems prior to Version 6.0, audit 
log files record the installed file name 
within an object name packet. To select the 
installed file, you must use the expression 
OBJECT=(NAME=filename) instead of 
FILE=filename. 


FLAGS=flag-name Specifies the names of the flags, which 
correspond to qualifiers of the Install 
utility (INSTALL); for example, OPEN 
corresponds to /OPEN. 


PRIVILEGES=privilege-name Specifies the names of the privileges with 
which the file was installed. 


LNM_PARENT_NAME=(table-name.,...) 
Specifies the name of the parent logical name table. 


LNM_TABLE_NAME=(table-name.,...) 
Specifies the name of the logical name table. 


LOCAL=(characteristic,...) 
Specifies the characteristics of the local (proxy) account to be used when selecting 
event records. The following characteristic is supported: 


USERNAME=username Specifies the name of the local account. 
You can represent all or part of the name 
with a wildcard. 


LOGICAL_NAME=(logical-name.,...) 

Specifies the logical name of the mounted (or dismounted) volume upon which 
selection is based. You can represent all or part of the logical name with a 
wildcard. 


MAILBOX_UNIT=(number.,...) 
Specifies the number of the mailbox unit. 


MOUNT_FLAGS=(flag-name.,...) 
Specifies the names of the volume mounting flags upon which selection is based. 
Possible flag names include the following: 


CACHE=(NONE, WRITETHROUGH) 

CLUSTER 

DATACHECK=(READ, WRITE) 

FOREIGN 

GROUP 
INITIALIZATION=(ALLOCATE,CONTINUATION) 
INTERCHANGE 

MESSAGE 

NOASSIST 


ANALYZE/AUDIT 
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NOAUTO 
NODISKQ 
NOHDR3 
NOLABEL 
NOWRITE 
ACCESSIBILITY 
EXPIRATION 
‘ IDENTIFICATION 
OVERRIDE=(optionsf....]) LOCK 
OWNER_IDENTIFIER 
SETID 
SHARE 
SYSTEM 


NEW_DATA=(value.,...) 
Specifies the value to use after the event occurs. Use this criterion with the 
FIELD_NAME criterion.) 


NEW_IMAGE_NAME=(image-name....) 
Specifies the name of the image to be activated in the newly created process, as 
supplied to the $CREPRC system service. 


NEW_OWNER=(uic....) 
Specifies the user identification code (UIC) to be assigned to the created process, 
as supplied to the $CREPRC system service. 


OBJECT=keyword(,...) 
Specifies which characteristics of an object should be used when selecting event 
records. Choose any of the following keywords: 


CLASS=class-name Specifies the general object class as one of 
the following: 
Capability 
Device 
Event_cluster 
File 
Group_global_section 
Logical_name_table 
Queue 
Resource_domain 
Security_class 
System_global_section 
Volume 


You must enter the full class name (for 
example, CLASS=logical_name_table) 
or use wildcard characters to supply a 
portion of the class name (for example, 
CLASS=log*). 
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This keyword supersedes the TYPE 
keyword used in earlier versions of the 
operating system. However, the TYPE 
keyword is still required to select audit 
records generated on AXP systems and on 
VAX systems running a version of VMS 
prior to Version 6.0. 


NAME=zobject-name Specifies the name of the object. You can 
represent all or part of the name with a 
wildcard. If you do not use a wildcard, 
specify the full object name (for example, _ 
BOSTON$DUA0:[RWOODS]JMEMO.MEM;]1). 


OWNERe=value Specifies the UIC or general identifier of 
the object. 


TYPE=type Specifies the general object class (type 
of object). The available classes are as 
follows: 

Capability 

Device 

File 
Group_global_section 
Logical_name_table 
Queue 
System_global_section 


PARENT=keyword(....) 
Specifies which characteristics of the parent process are used when selecting 
event records generated by a subprocess. Choose from the following keywords: 


IDENTIFICATION=value Specifies the process identification (PID) of 
the parent process. 


NAME<=process-name Specifies the name of the parent process. 
You can represent all or part of the name 
with a wildcard. 


OWNER=value Specifies the owner (identifier value) of the 
parent process. 


USERNAME=username Specifies the user name of the parent 
process. You can represent all or part of 
the name with a wildcard. 


PASSWORD=(password....) 
Specifies the password used when the system detected a break-in attempt. 


PRIVILEGES_MISSING=(privilege-name.,...) 
Specifies privileges the caller needed to perform the operation successfully. 
Specify any of the system privileges, as described in the Security Guide. 


PRIVILEGES_USED=(privilege-name.,...) ; 
Specifies the privileges of the process to be used when selecting event records. 
Specify any of the system privileges, as described in the Security Guide. 

Also include the STATUS keyword in the selection criteria so the report can 
demonstrate whether the privilege was involved in a successful or an unsuccessful 
operation. 
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PROCESS=(characteristic.,...) 
Specifies the characteristics of the process to be used when selecting event 
records. Choose from the following characteristics: 


IDENTIFICATION=value Specifies the PID of the process. 

NAME=process-name Specifies the name of the process. You can 
represent all or part of the name with a 
wildcard. 


REMOTE=keyword(,...) 
Specifies that some characteristic of the network request is to be used when 
selecting event records. Choose from the following keywords: 


ASSOCIATION_NAME=IPC-name _ Specifies the interprocess communication 
(IPC) association name. 
LINK_IDENTIFICATION=value Specifies the number of the DECnet logical 


link. 

IDENTIFICATION=value Specifies the DECnet node address. 

NODENAME=node-name Specifies the DECnet node name. You can 
represent all or part of the name with a 
wildcard. 

USERNAME =username Specifies the remote user name. You can 


represent all or part of the remote user 
name with a wildcard. 


REQUEST_NUMBER=(value.,...) 
Specifies the request number associated with the DCL command REQUEST 
/REPLY. 


SECTION_NAME=(global-section-name.,...) 
Specifies the name of the global section. 


SNAPSHOT_BOOTFILE=(filename.,...) 
Specifies the name of the file containing a snapshot of the system. 


SNAPSHOT_SAVE_FILENAME=(filename.,...) 
Specifies the name of the system snapshot file for a save operation that is in 
progress. 


STATUS=type(....) 
Specifies the type of success status to be used when selecting event records. 
Choose from the following status types: 


SUCCESSFUL Specifies any success status. 
FAILURE Specifies any failure status. 
CODE=(value,...) Specifies a specific completion status. 


SUBJECT_OWNER=(uic.,...) 
Specifies the owner (UIC) of the process causing the event. 


SYSTEM=keyword(,...) 
Specifies the characteristics of the system to be used when selecting event 
records. Choose from the following keywords: 
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IDENTIFICATION=value Specifies the numeric identification of the 
system. 
NAME=nodename Specifies the node name of the system. 
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SYSTEM_SERVICE_NAME=(service-name.,...) 
Specifies the name of the system service associated with the event. 


TARGET_DEVICE_NAME=(device-name.,...) 
Specifies the target device name used by a process control system service. 


TARGET_PROCESS_IDENTIFICATION=(value.,...) 
Specifies the target process identifier (PID) used by a process control system 
service. 


TARGET_PROCESS_NAME=(process-name.,...) 
Specifies the target process name used by a process control system service. 


TARGET_PROCESS_OWNER=(uic....) 
Specifies the target process owner (UIC) used by a process control system service. 


TARGET_USERNAME=(username.,...) 
Specifies the target user name used by a process control system service. 


TERMINAL=(device-name.,...) 
Specifies the name of the terminal to be used when selecting event records. You 
can represent all or part of the terminal name with a wildcard. 


TRANSPORT_NAME=(transport-name.,...) 

Specifies the name of the transport: interprocess communication (IPC), DECnet, 
or System Management Integrator (SMI), which handles requests from the 
System Management utility. 


UAF_ADD=(record-name.,...) 
Specifies the name of the authorization record being added. 


UAF_COPY=(record-name.,...) 
Specifies the original and new names of the authorization record being copied. 


UAF_DELETE=(record-name.,...) 
Specifies the name of the authorization record being removed. 


UAF_MODIFY=(record-name.,...) 
Specifies the name of the authorization record being modified. 


UAF_RENAME=(record-name,...) __ 
Specifies the name of the authorization record being renamed. 


UAF_SOURCE=(record-name.,...) 
Specifies the user name of the source record for an Authorize utility 
(AUTHORIZE) copy operation. 


USERNAME=(username.,...) 
Specifies the user name to be used when selecting event records. You can 
represent all or part of the user name with a wildcard. 


Examples 
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VOLUME_NAME=(volume-name.,...) 

Specifies the name of the mounted (or dismounted) volume to be used when 
selecting event records. You can represent all or part of the volume name with a 
wildcard. 


VOLUME_SET_NAME=(volume-set-name.,...) 

Specifies the name of the mounted (or dismounted) volume set to be used when 
selecting event records. You can represent all or part of the volume set name 
with a wildcard. 


BE 


$ ANALYZE/AUDIT /FULL/SELECT=USERNAME=JOHNSON - 
_$ SYS$MANAGER: SECURITY . AUDITSJOURNAL 


The command in this VAX system example selects all records written to the 
security audit log file that were generated by user JOHNSON. 


$ ANALYZE/AUDIT/FULL/SELECT=PRIVILEGES USED=(SYSPRV, - 
_$ BYPASS) SYSSMANAGER:SECURITY.AUDITSJOURNAL 


The command in this VAX system example selects all records written to the 
security audit log file that were generated by events through the use of either 
SYSPRV or BYPASS privilege. 


$ ANALYZE/AUDIT/FULL/EVENT=SYSUAF/SELECT= - 
_SIMAGE=("*: [SYS*SYSEXE ]SETP0.EXE","*:[SYS*SYSEXE]LOGINOUT.EXE") - 
~SSYSSMANAGER : SECURITY 


The command in this example selects all records written to the security audit 
log file that involve password changes. 


The following is a VAX system example command procedure that you 
could run at midnight to select all SYSUAF, AUDIT, and BREAKIN events 
(excluding password changes) and mail the result to the system manager: 


! DAILY AUDIT.COM 


$ 
$ 
$ mail list = "SYSTEM" 

$  audsrv$ noselect = %X003080A0 

$ audit events = "SYSUAF,BREAKIN, AUDIT" 
$ 
$ 


analyze /audit /full - 
/event=(‘audit_events’) - 
/output=audit.tmp - 
/ignore=image=("*:[SYS*SYSEXE]SETP0.EXE","*:[SYS*SYSEXE]LOGINOUT.EXE") - 
sysSmanager : SECURITY .AUDIT$JOURNAL 


$ 

$ status = $status 

$ if (status.and.$XFFFFFFF) .eq. audsrv$ noselect then goto no_ records 

$ if .not. status then goto error_analyze 

§ if f$file("audit.tmp","eof") .eq. 0 then goto no records 

$ mail /subject="'‘audit events’ listing from ''f$time()’" - 
audit.tmp ‘mail list’ 

$ goto new_log 

$ 

$ no_records: 

$ mail /subject="No interesting security events" nl: ‘mail list’ 

$ 

$ new_log: 

$ if f£$search("audit.tmp") .nes. "" then delete audit.tmp;* 

$ set audit /server=new_log 
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/SINCE 


Format 


Keyword 


Examples 


/SUMMARY 
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rename sys$manager:SECURITY.AUDITSJOURNAL;-1 - 
sysScommon: [sysmgr]’fSelement(0," ",fSedit(f$time(),"TRIM"))’ 
exit 


mail/subj="Error analyzing auditing information" nl: ‘mail list’ 


$ 

$ 

$ 

$ error analyze: 
$ 

$ exit ¢@ 


Indicates the utility must operate on records dated with the specified time or 
after the specified time. 


/SINCE[=time] 
/NOSINCE 


time 

Specifies the time used to select records. Records dated the same or later than 
the specified time are selected. You can specify an absolute time, a delta time, or 
a combination of the two. Observe the syntax rules for date and time described in 
the OpenVMS User’s Manual. 


If you specify /SINCE without the time, the utility uses the beginning of the 
current day. 


1. $ ANALYZE/AUDIT /SINCE=25-JUL-1994 - 
_§ SYS$MANAGER: SECURITY .AUDITSJOURNAL 


The command in this VAX system example selects records dated later than 
July 25, 1994. 


2. $ ANALYZE/AUDIT /SINCE=25-JUL-1994:15:00 - 
_$ SYSSMANAGER: SECURITY . AUDITSJOURNAL 


The command in this VAX system example selects records written after 3. PM. 
on July 25, 1994. 


Specifies that a summary of the selected records be produced after all records are 
processed. 


You can use the /SUMMARY qualifier alone or in combination with the /BRIEF, 
the /BINARY, or the /FULL qualifier. 


Format 


Keyword 


Examples 


AXP 


ANALYZE/AUDIT 
/SUMMARY 


/SUMMARY=presentation 
/NOSUMMARY 


presentation 
Specifies the presentation of the summary. If you do not specify a presentation 
criterion, ANALYZE/AUDIT summarizes the number of audits. 


You can specify either of the following presentations: 


COUNT 
Lists the total number of audit messages for each class of security event that 
have been extracted from the security audit log file. This is the default. 


PLOT 
Displays a plot showing the class of the audit event, the time of day when the 
audit was generated, and the name of the system where the audit was generated. 


1. $ ANALYZE/AUDIT/SUMMARY SYSSMANAGER: SECURITY .AUDITSJOURNAL 


The command in this VAX system example generates a summary report of all 
records processed. 


On AXP systems, the display is as follows: 


Total records read: 10831 Records selected: 10831 
Record buffer size: 512 Format buffer size: 128 
Server messages: 0 Customer messages: 0 
Digital CSS messages: 0 Layered prod messages: 0 
Audit changes: 169 Installed db changes: 322 
Login failures: 246 Breakin attempts: 0 
Successful logins: 1719 Successful logouts: 951 
System UAF changes: 33 Network UAF changes: 0 
Rights db changes: 3 Object accesses: 6976 
Volume (dis)mounts: 412 ¢ 


On VAX systems, the display is as follows: 


Total records read: 9701 Records selected: 9701 
Record buffer size: 1031 

Successful logins: 542 Object creates: 1278 
Successful logouts: 531 Object accesses: 3761 
Login failures: 35 Object deaccesses: 2901 
Breakin attempts: e iZ Object deletes: 301 
System UAF changes: 10 Volume (dis)mounts: 50 
Rights db changes: 8 System time changes: 0 
Netproxy changes: 5 Server messages: 0 
Audit changes: 7 Connections: 0 
Installed db changes: 50 Process control audits: 0 
Sysgen changes: 9 Privilege audits: 91 
NCP command lines: 120 ¢ 
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/SUMMARY 


Date 


2. 


$ ANALYZE/AUDIT/FULL/EVENT_ TYPE=(BREAKIN, LOGFAIL) /SUMMARY- 
_$ SYSS$MANAGER: SECURITY .AUDITSJOURNAL 


The command in this VAX system example generates a full format listing of 
all logged audit messages that match the break-in or log failure event classes. 
A summary report is included at the end of the listing. 


$ ANALYZE/AUDIT/FULL/EVENT -TYPE=(BREAKIN, LOGFAIL) /SUMMARY=PLOT - 
_5 SYSS$MANAGER: SECURITY. AUDITS$ JOURNAL 


This command generates a histogram that you can display on a character-cell 
terminal. 


Node: ATHENS 


[9d}06| 0100]0200/6300) o4c0 asta o600 [0700 [80a [0900 [4000/4190 /1200]1300]| 1400] 1800/1609] 1700/1800) 1960|2000|21099]2200| 2509) 
129 71 


7-aaN 
11-JAN 
13-JAN 
14~JAN 
15-JAN 
16-JAN 
17-JAN 
18-JAN 
19-JAN 
20-JAN 
21-JAN 
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138 
12 
109 


386 


89 


128 
70 


701 


16 


14 
11 


37 


928 772 757 397 27 56 440 891 148 561 253 321 86 91 117 


117 184 93 141 68 


64 630 
108 239 354 659 16 105 161 160 165 147 
180 176 63 27 #4228 15 = 43 
17 168 182 200 167 #156 104 97 212 #208 219 154 241 199 211 43 108 88 5 5 
522 4 15 il 9 5 
17 5 27 46 134 209 466 417 97 223 240 660 789 246 494 273 213 333 232 273 


35 28 32 47 #238 #$$70 81 90 115 155 
ZK-5912A-GE 
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ANALYZE/AUDIT Commands 


CONTINUE 


Format 


Parameters 


Qualifiers 


Example 


DISPLAY 


Format 


Parameters 


This section describes the interactive commands available with the Audit 
Analysis utility (ANALYZE/AUDIT). The qualifiers for this section follow the 
standard rules of DCL grammar. 


The utility runs interactively by default; you disable the feature with the 
/NOINTERACTIVE qualifier to the ANALYZE/AUDIT command. To enter 
interactive commands, press Ctrl/C at any time during the processing of a full 
or brief interactive display. At the COMMAND> prompt, you can enter any of 
the commands listed in this section. Use the CONTINUE command to resume 
processing of the event records, or use the EXIT command to terminate the 
session. 


Resumes processing of event records. 


CONTINUE 


None. 


None. 


COMMAND> DISPLAY /SINCE=25-JUN-1994 /SELECT=USERNAME=JOHNSON 
COMMAND> CONTINUE 


The first command in this example selects only event records generated by user 
JOHNSON after June 25, 1994. The second command in the example displays a 
report based on the new selection criteria. 


Changes the criteria used to select event records. 


DISPLAY 


None. 


For a more complete description of any one of the following qualifiers, refer to the 
description of the qualifier in the preceding Analyze/Audit Qualifiers section. 
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Qualifiers 


Examples 


/BEFORE=time 
Controls whether only those records dated earlier than the specified time are 
selected. 


/BRIEF 
Controls whether a brief (one-line-per-record) format is used in ASCII displays. 


/EVENT_TYPE=event-type[,...] 
Controls whether only those records matching the specified event type are 
selected. 


/FULL 
Controls whether a full format for each record is used in ASCII displays. 


AGNORE=criteria{,...] 

Controls whether records matching the specified criteria are excluded. If you 
specify /IGNORE two or more times, the criteria are combined. To specify a 
new set of exclusion criteria, include the /REMOVE qualifier with the IGNORE 
qualifier. 


/PAUSE=seconds 
For full-format displays (/FULL), specifies the length of time each record is 
displayed. 


/REMOVE 
Controls whether the criteria specified by the /IGNORE and the /SELECT 
qualifiers are no longer to be used to select event records to be displayed. 


/SELECT=criteria{....] 

Controls whether only those records matching the specified criteria are selected. 

If you specify /SELECT two or more times, the criteria are combined. To specify 

a new set of selection criteria, include the /REMOVE qualifier with the /SELECT 
qualifier. 


/SINCE[=time] 
Controls whether only those records dated the same or later than the specified 
time are selected. 


1. COMMAND> DISPLAY/EVENT_ TYPE=SYSUAF 
COMMAND> CONTINUE 


The first command in this example selects records that were generated as a 
result of a modification to the system user authorization file (SYSUAF). The 
second command displays the selected records. 


EXIT 


Format 


Parameters 


Qualifiers 


HELP 


Format 


Parameter 


Qualifiers 


Example 


ANALYZE/AUDIT 
DISPLAY 


2. COMMAND> DISPLAY/SELECT=USERNAME=CRICK 
COMMAND> CONTINUE 


COMMAND> DISPLAY /SELECT=USERNAME=WATSON 
COMMAND> CONTINUE 


The first DISPLAY command in this example selects records that were 
generated by user CRICK. The second command displays the selected records. 
The next DISPLAY command selects records that were generated by user 
WATSON. The last command in the example displays all records generated by 
users CRICK and WATSON. 


Terminates the session. 
EXIT 
None. 


None. 


Provides online help information for using ANALYZE/AUDIT commands. 
HELP [topic] 


topic 

Specifies the command for which help information is to be displayed. If you omit 
the keyword, HELP displays a list of available help topics and prompts you for a 
particular keyword. 


None. 


COMMAND> HELP DISPLAY 


The command in this example displays help information about the DISPLAY 
command. 
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LIST 


Format 


Parameters 


Qualifiers 


Example 


NEXT FILE 


Format 


Parameters 


Qualifiers 
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Changes the criteria used to select event records. The LIST command is 
synonymous with the DISPLAY command. 


LIST 


None. 


See the description of the DISPLAY command. 


COMMAND> LIST/EVENT_TYPE=SYSUAF 
COMMAND> CONTINUE 


The first command in this example selects records that were generated as a result 
of a modification to the system user authorization file (SYSUAF). The second 
command displays the selected records. 


Controls whether the current security audit log file is closed and the next log 
file opened. The command is useful when you supply a wildcard file specification 
to the ANALYZE/AUDIT command; for example *.AUDIT$JOURNAL. If there 
are no other audit log files to open, the audit analysis session is terminated and 
control returns to DCL. 


NEXT FILE 


None. 


None. 
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NEXT RECORD 


NEXT RECORD 


Format 


Parameters 


Qualifiers 


POSITION 


Format 


Parameter 


Qualifiers 


Examples 


Controls whether the next audit record is displayed. The NEXT RECORD 
command is synonymous with the POSITION command. 


NEXT RECORD 


None. 


None. 


Moves the full-format display forward or backward the specified number of event 
records. 


POSITION number 


number 

For positive numbers, displays the record that is the specified number of records 
after the current record. For negative numbers, displays the record that is the 
specified number of records before the current record. 


None. 


1. COMMAND> POSITION 100 


The command in this example moves the display forward 100 event records. 


2. COMMAND> POSITION -100 


The command in this example moves the display back 100 event records. 
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SHOW 


Format 


Parameter 


Qualifiers 


Example 


Displays information about the selection or exclusion criteria currently being used 
to select event records. 


SHOW optionf,....] 


option{,...] 
Displays information about selection or exclusion criteria currently being used to 
select records. Specify one or more of the following options: 


ALL Displays all criteria being used to select event 
records. 

EXCLUSION_CRITERIA Displays the criteria being used to exclude event 
records. 

SELECTION_CRITERIA Displays the criteria being used to select event 
records. 

None. 


COMMAND> SHOW SELECTION CRITERIA 


The command in this example displays the selection criteria currently in use to 
select records. 


2 


Authorize Utility 


AUTHORIZE Description 


The Authorize utility (AUTHORIZE) is a system management tool used to control 
access to the system and to allocate resources to users. AUTHORIZE creates new 
records or modifies existing records in the following files: 


e System user authorization file (SYSUAF.DAT) 


You can use AUTHORIZE to assign values to various fields within each 
SYSUAF record. The values you assign identify the user and the user’s work 
environment, and control use of system resources. 


¢ Network proxy authorization file (NETPROXY.DAT) 
e Rights database file (RIGHTSLIST.DAT) 


These three files store system authorization information. By default, they are 
owned by the system (UIC of [SYSTEM]) and are created with the following 


protection: 

SYSUAF.DAT S:RWED, O:RWED, G, W 

NETPROXY. DAT S:RWED, O:RWED, G:RWE, W 

RIGHTSLIST.DAT S:RWED, O:RWED, G:RWE, W:R (AXP only) 
RIGHTSLIST.DAT S:RWED, O:RWED, G:R, W: (VAX only) 


To use AUTHORIZE, you must have write access to all three of these files 
(in other words, you must have an account with the UIC of [SYSTEM] or the 
SYSPRV privilege). 


> On VAX systems, note that you must have read access to the RIGHTSLIST.DAT 
file (or sufficient privileges) to display the rights identifiers held by other users. ¢ 


Because certain images (such as MAIL and SET) require access to the system 
UAF and are normally installed with the SYSPRV privilege, ensure that you 
always grant system access to SYSUAF.DAT. 


When you install a new system, the software distribution kit provides the 
following records in the system user authorization file in SYS$SYSTEM: 


DEFAULT 
FIELD 
SYSTEM 
SYSTEST 
SYSTEST_CLIG 


If the SYSUAF.DAT becomes corrupted or is accidentally deleted, you can use the 
template file SYSUAF.TEMPLATE in the SYS$SYSTEM directory to recreate the 
file, as follows: 


$ SET DEFAULT SYSSSYSTEM 
$ COPY SYSUAF.TEMPLATE SYSUAF.DAT 


The file SYSUAF.TEMPLATE contains records that are identical to those defined 
when the system was installed. 


As an emergency backup for the system SYSUAF file, you can create a 
private copy of SYSUAF.DAT. To affect future logins, copy a private version of 
SYSUAE.DAT to the appropriate directory, as shown in the following example: 


$ COPY MYSYSUAF.DAT SYSSCOMMON: [SYSEXE] :SYSUAF.DAT- 
_$ /PROTECTION=(S:RWED,O:RWED,G,W) 
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AUTHORIZE Usage Summary 


Format 


The Authorize utility (AUTHORIZE) is a system management tool that allows 
you to control access to the system and to allocate resources to users. 


RUN SYS$SYSTEM:AUTHORIZE 


Parameters 
None. 


Usage Summary 
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To invoke AUTHORIZE, set your default device and directory to SYS$SYSTEM 
and enter RUN AUTHORIZE at the DCL command prompt. At the UAF> 
prompt, you can enter any of the AUTHORIZE commands described in the 
following section. 


To exit from AUTHORIZE, enter the EXIT command at the UAF> prompt or 
press Ctrl/Z. 


If you move the SYSUAF.DAT file, be sure the logical name SYSUAF is 
defined and points to an existing file. If AUTHORIZE is unable to locate the 
SYSUAF.DAT file, it displays the following error message: 


$UAF-E-NAOFIL, unable to open SYSUAF.DAT 
-RMS-E-FNF, file not found 
Do you want to create a new file? 


A response of YES results in creation of a new SYSUAF file containing a 
SYSTEM record and a DEFAULT record. These records are initialized with the 
same values set when the system was installed. 


AUTHORIZE Commands 


This section describes the AUTHORIZE commands and provides examples of 
their use. You can abbreviate any command, keyword, or qualifier as long as the 
abbreviation is not ambiguous. The asterisk (*) and the percent sign (% ) can be 
used as wildcard characters to specify user names, node names, and UICs. 


AUTHORIZE commands fall into the following four categories: 


¢ Commands that allow you to manage user authorization records. By 
specifying appropriate qualifiers, you can use these commands to act upon 
individual fields of SYSUAF records. You can identify the user and the user’s 
work environment and control use of system resources. 


¢ Commands that build and maintain the network proxy authorization file 


(NETPROXY.DAT). 


¢ Commands that create and maintain the rights database (RIGHTSLIST.DAT). 


¢ Commands that perform general utility functions or modify the system 


password. 


Table 5-1 summarizes the AUTHORIZE commands according to these categories. 


Table 5~1 AUTHORIZE Command Summary 


Command 


Description 


Managing System Resources and User Accounts with SYSUAF 


ADD 


COPY 


DEFAULT 
LIST 


MODIFY 


REMOVE 


RENAME 


SHOW 


Adds a user record to the SYSUAF and 
corresponding identifiers to the rights database. 


Creates a new SYSUAF record that duplicates an 
existing record. 


Modifies the default SYSUAF record. 


Writes reports for selected UAF records to a listing 
file. SYSUAF.LIS. 


Changes values in a SYSUAF user record. 
Qualifiers not specified in the command remain 
unchanged. 


Deletes a SYSUAF user record and corresponding 
identifiers in the rights database. The DEFAULT 
and SYSTEM records cannot be deleted. 


Changes the user name of the SYSUAF record 
(and, if specified, the corresponding identifier) 
while retaining the characteristics of the old record. 


Displays reports for selected SYSUAF records. 


(continued on next page) 
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ADD 


Format 
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Table 5-1 (Cont.) AUTHORIZE Command Summary 


Command 


Description 


Managing Network Proxies with NETPROXY.DAT 


ADD/PROXY 
CREATE/PROXY 
LIST/PROXY 


MODIFY/PROXY 
REMOVE/PROXY 
SHOW/PROXY 


Adds proxy access for the specified user. 
Creates a network proxy authorization file. 


Creates a listing file of all proxy accounts and all 
remote users with proxy access to the accounts. 


Modifies proxy access for the specified user. 
Deletes proxy access for the specified user. 
Displays proxy access allowed for the specified user. 


Managing Identifiers with RIGHTSLIST.DAT 


ADD/IDENTIFIER 
CREATE/RIGHTS 
GRANT/IDENTIFIER 
LIST/IDENTIFIER 
LIST/RIGHTS 


MODIFY/IDENTIFIER 


REMOVE/ADENTIFIER 
RENAME/IDENTIFIER 
REVOKE/IDENTIFIER 
SHOW/IDENTIFIER 


SHOW/RIGHTS 


EXIT 
HELP 


MODIFY/SYSTEM_PASSWORD 


Adds an identifier name to the rights database. 
Creates a new rights database file. 

Grants an identifier name to a UIC identifier. 
Creates a listing file of identifier names and values. 


Creates a listing file of all identifiers held by the 
specified user. 


Modifies the named identifier in the rights 
database. 


Removes an identifier from the rights database. 
Renames an identifier in the rights database. 
Revokes an identifier name from a UIC identifier. 


Displays identifier names and values on the current 
output device. 


Displays on the current output device the names of 
all identifiers held by the specified user. 


General Commands 


Returns the user to DCL command level. 
Displays HELP text for AUTHORIZE commands. 


Sets the system password (equivalent to the DCL 
command SET PASSWORD/SYSTEM). 


Adds a user record to the SYSUAF and corresponding identifiers to the rights 


database. 


ADD newusername 


Parameter 


Qualifiers 
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newusername 

Specifies the name of the user record to be included in the SYSUAF. The 
newusername parameter is a string of 1 to 12 alphanumeric characters and 
can contain underscores. Although dollar signs are permitted, they are usually 
reserved for system names. 


Avoid using fully numeric user names (for example, 89560312). A fully numeric 
user name cannot receive a corresponding identifier because fully numeric 
identifiers are not permitted. 


/ACCESS[=(range....])] 
Specifies hours of access for all modes of access. The syntax for specifying the 
range is: 


/[NOJACCESS=([PRIMARY}], [n-m], [n], [,...], [SECONDARY], [n-m], [n], [,.--]) 


Specify hours as integers from 0 to 23, inclusive. You can specify single hours 
(n) or ranges of hours (n-m). If the ending hour of a range is earlier than the 
starting hour, the range extends from the starting hour through midnight to 
the ending hour. The first set of hours after the keyword PRIMARY specifies 
hours on primary days; the second set of hours after the keyword SECONDARY 
specifies hours on secondary days. Note that hours are inclusive; that is, if you 
grant access during a given hour, access extends to the end of that hour. 


By default, a user has full access every day. See the DCL command SET DAY 
in the OpenVMS DCL Dictionary for information on overriding the defaults for 
primary and secondary day types. 


All the list elements are optional. Unless you specify hours for a day type, access 
is permitted for the entire day. By specifying an access time, you prevent access 
at all other times. Adding NO to the qualifier denies the user access to the 
system for the specified period of time. 


Examples: 

/ACCESS Allows unrestricted access 

/NOACCESS=SECONDARY Allows access on primary days only 

/ACCESS=(9-17) Allows access from 9 A.M. to 5:59 PM. on 
all days 

/NOACCESS=(PRIMARY, 9-17, Disallows access between 9 A.M. to 5:59 

SECONDARY, 18-8) | PM. on primary days but allows access 


during these hours on secondary days 


To specify access hours for specific types of access, see the /BATCH, /DIALUP, 
JAINTERACTIVE, /LOCAL, /NETWORK, and /REMOTE qualifiers. 


/ACCOUNT=account-name : 

Specifies the default name for the account (for example, a billing name or 
number). The name can be a string of 1 to 8 alphanumeric characters. By 
default, AUTHORIZE does not assign an account name. 


/ADD_IDENTIFIER (default) 
/NOADD_IDENTIFIER 
Adds identifiers for the user name and account name to the rights database. 
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/ALGORITHM=keyword=type [=value] 

Sets the password encryption algorithm for a user. The keyword VMS refers 

to the algorithm used in the operating system version that is running on your 
system, whereas a customer algorithm is one that is added through the $HASH_ 
PASSWORD system service by a customer site, by a layered product, or by a 
third party. The customer algorithm is identified in $HASH_PASSWORD by an 
integer in the range of 128 to 255. It must correspond with the number used 

in the AUTHORIZE command MODIFY/ALGORITHM. By default, passwords 
are encrypted with the VMS algorithm for the current version of the operating 
system. 


Keyword Function 
BOTH Set the algorithm for primary and secondary passwords. 
CURRENT Set the algorithm for the primary, secondary, both, or no 


passwords, depending on account status. CURRENT is the 
default value. 


PRIMARY Set the algorithm for the primary password only. 
SECONDARY Set the algorithm for the secondary password only. 


The following table lists password encryption algorithms: 


Type Definition 

VMS The algorithm used in the version of the operating system 
that is running on your system. 

CUSTOMER A numeric value in the range of 128 to 255 that identifies a 


customer algorithm. 


The following example selects the VMS algorithm for Sontag’s primary password: 
UAF> MODIFY SONTAG/ALGORITHM=PRIMARY=VMS 


If you select a site-specific algorithm, you must give a value to identify the 
algorithm, as follows: 


UAF> MODIFY SONTAG/ALGORITHM=CURRENT=CUSTOMER=128 


/ASTLM=value 


Specifies the AST queue limit, which is the total number of asynchronous system 
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trap (AST) operations and scheduled wake-up requests that the user can have 
queued at one time. The default is 40 on VAX systems and 250 on AXP systems. 


/BATCH[=(rangef,...])] 

Specifies the hours of access permitted for batch jobs. For a description of the 
range specification, see the /ACCESS qualifier. By default, a user can submit 
batch jobs any time. . 


/BIOLM=value 

Specifies a buffered I/O count limit for the BIOLM field of the UAF record. The 
buffered I/O count limit is the maximum number of buffered I/O operations, such 
as terminal J/O, that can be outstanding at one time. The default is 40 on VAX 
systems and 150 on AXP systems. 
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/BYTLM=value 

Specifies the buffered I/O byte limit for the BYTLM field of the UAF record. The 
buffered I/O byte limit is the maximum number of bytes of nonpaged system 
dynamic memory that a user’s job can consume at one time. Nonpaged dynamic 
memory is used for operations such as I/O buffering, mailboxes, and file-access 
windows. The default is 32768 on VAX systems and 64000 on AXP systems. 


/CLi=cli-name 

Specifies the name of the default command language interpreter (CLI) for the 
CLI field of the UAF record. The cli-name is a string of 1 to 31 alphanumeric 
characters and should be either DCL or MCR. The default is DCL. 


/CLITABLES=filespec 
Specifies user-defined CLI tables for the account. The filespec can contain 1 to 31 
characters. The default is SYS$LIBRARY:DCLTABLES. 


/CPUTIME=time 

Specifies the maximum process CPU time for the CPU field of the UAF record. 
The maximum process CPU time is the maximum amount of CPU time a 
user’s process can take per session. You must specify a delta time value. For a 
discussion of delta time values, see the OpenVMS User’s Manual. The default is 
0, which means an infinite amount of time. 


/DEFPRIVILEGES=([NO]privnamef{....]) 

Specifies default privileges for the user; that is, those enabled at login time. 

A NO prefix removes a privilege from the user. By specifying the keyword 
[NOJALL with the /DEFPRIVILEGES qualifier, you can disable or enable all user 
privileges. The default privileges are TMPMBX and NETMBX. 


/DEVICE=device-name 

Specifies the name of the user’s default device at login. The device-name is a 
string of 1 to 31 alphanumeric characters. If you omit the colon from the device- 
name value, AUTHORIZE appends a colon. The default device is SYS$SYSDISK. 


If you specify a logical name as the device-name (for example, DISK1: for DUA1:), 
you must make an entry for the logical name in the LNM$SYSTEM_TABLE in 
executive mode by using the DCL command DEFINE/SYSTEM/EXEC. 


/DIALUP[=(range{,...])] 
Specifies hours of access permitted for dialup logins. For a description of the 
range specification, see the /ACCESS qualifier. The default is full access. 


/DIOLM=value 

Specifies the direct I/O count limit for the DIOLM field of the UAF record. The 
direct I/O count limit is the maximum number of direct I/O operations (usually 
disk) that can be outstanding at one time. The default is 40 on VAX systems and 
150 on AXP systems. 


/DIRECTORY=directory-name 

Specifies the default directory name for the DIRECTORY field of the UAF record. 
The directory name can be 1 to 39 alphanumeric characters. If you do not enclose 
the directory name in brackets, AUTHORIZE adds the brackets for you. The 
default directory name is [USER]. 
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/ENQLM=value 7 

Specifies the lock queue limit for the ENQLM field of the UAF record. The lock 
queue limit is the maximum number of locks that can be queued by the user at 
one time. The default is 200 on VAX systems and 2000 on AXP systems. 


/EXPIRATION=time (default) 

/NOEXPIRATION 

Specifies the expiration date and time of the account. The /NOEXPIRATION 
qualifier removes the expiration date on the account or resets the expiration 
time for expired accounts. The default expiration time period is 90 days for 

nonprivileged users. 


/FILLM=value 

Specifies the open file limit for the FILLM field of the UAF record. The open file 
limit is the maximum number of files that can be open at one time, including 
active network logical links. The default is 300 on VAX systems and 100 on AXP 
systems. 


/FLAGS=([NO]option[,...]) 
Specifies login flags for the user. The prefix NO clears the flag. The options are 
as follows: 


AUDIT Enables or disables mandatory security auditing 
for a specific user. By default, the system 
does not audit the activities of specific users 
(NOAUDIT). 


AUTOLOGIN Restricts the user to the automatic login 
mechanism when logging in to an account. When 
set, the flag disables login by any terminal that 
requires entry of a user name and password. The 


default is to require a user name and password 
(NOAUTOLOGIN). 


CAPTIVE Prevents the user from changing any defaults 
at login, for example, /CLI, /DISK, /COMMAND, 
or /LGICMD. It prevents the user from escaping 
the captive login command procedure specified 
by the /LGICMD qualifier and gaining access 
to the DCL command level. The CAPTIVE flag 
also establishes an environment where Ctrl/Y 
interrupts are initially turned off; however, 
command procedures can still turn on Ctrl 
/Y interrupts with the DCL command SET 
CONTROL=Y. By default, an account is not 
captive (NOCAPTIVE). 


DEFCLI Restricts the user to the default command 
interpreter by prohibiting the use of the /CLI 
qualifier at login; the MCR command can still 
be used. By default, a user can choose a CLI 
(NODEFCLD. 


DISCTLY 


DISFORCE_PWD_CHANGE 


DISIMAGE 


DISMAIL 


DISNEWMAIL 


DISPWDDIC 


DISPWDHIS 


DISRECONNECT 


DISREPORT 


DISUSER 
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Establishes an environment where Ctrl/Y 
interrupts are initially turned off and are 
invalid until a SET CONTROL_Y is encountered. 
This could happen in SYLOGIN.COM or in a 
procedure called by SYLOGIN.COM. Once a SET 
CONTROL_Y is executed (which requires no 
privilege), a user can enter a Ctrl/Y and reach 
the DCL prompt ($). If the intent of DISCTLY 
is to force execution of the login command files, 
then SYLOGIN.COM should issue the DCL 
command SET CONTROL_Y to turn on Ctrl/Y 
interrupts before exiting. By default, Ctrl/Y is 
enabled (NODISCTLY). 


Removes the requirement that a user must 
change an expired password at login. By default, 
a person can use an expired password only once 
(NODISFORCE_PWD_CHANGE) and then is 
forced to change the password after logging in. If 
the user does not select a new password, the user 
is locked out of the system. 


Prevents the user from executing RUN, MCR, 
and foreign commands. By default, a user can 
execute RUN, MCR, and foreign commands 
(NODISIMAGE). 


Disables mail delivery to the user. By default, 
mail delivery is enabled (NODISMAIL). 


Suppresses announcements of new mail at login. 
By default, the system announces new mail 
(NODISNEWMAIL). 


Disables automatic screening of new passwords 
against a system dictionary. By default, 
passwords are automatically screened 
(NODISPWDDIC). 


Disables automatic checking of new passwords 
against a list of the user’s old passwords. By 
default, the system screens new passwords 
(NODISPWDHIS). 


Disables automatic reconnection to an existing 
process when a terminal connection has been 
interrupted. By default, automatic reconnection 
is enabled (NODISRECONNECT). 


Suppresses reports of the last login time, login 
failures, and other security reports. By default, 
login information is displayed (NODISREPORT). 


Disables the account so the user cannot log in. 
For example, the DEFAULT account is disabled. 
By default, an account is enabled (NODISUSER). 
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DISWELCOME 


GENPWD 


LOCKPWD 


PWD_EXPIRED 


PWD2_EXPIRED 


RESTRICTED 


Suppresses the welcome message (an 
informational message displayed during a 

local login). This message usually indicates 

the version number of the operating system that 
is running and the name of the node on which 
the user is logged in. By default, a system login 
message appears (NODISWELCOME). 


Restricts the user to generated passwords. 
By default, users choose their own passwords 
(NOGENPWD). 


Prevents the user from changing the password 
for the account. By default, users can change 
their passwords (NOLOCKPWD). 


Marks a password as expired. The user cannot 
log in if this flag is set. The LOGINOUT.EXE 
image sets the flag when both of the following 
conditions exist: a user logs in with the 
DISFORCE_PWD_CHANGE flag set, and the 
user’s password expires. A system manager can 
clear this flag. By default, passwords are not 
expired after login (NOPWD_EXPIRED). 


Marks a secondary password as expired. 

Users cannot log in if this flag is set. The 
LOGINOUT.EXE image sets the flag when 
both of the following conditions exist: a user 
logs in with the DISFORCE_PWD_CHANGE 
flag set, and the user’s password expires. A 
system manager can clear this flag. By default, 
passwords are not set to expire after login 
(NOPWD2_EXPIRED). 


Prevents the user from changing any defaults 

at login (for example, by specifying /DISK, 
/COMMAND, or /LGICMD) and prohibits user 
specification of a CLI with the /CLI qualifier. The 
RESTRICTED flag establishes an environment 
where Ctrl/Y interrupts are initially turned off; 
however, command procedures can still turn 

on Ctrl/Y interrupts with the DCL command 
SET CONTROL_Y. Typically, this flag is used 

to prevent an applications user from having 
unrestricted access to the CLI. By default, a user 
can change defaults (NORESTRICTED). 

This flag provides compatibility with CAPTIVE 
accounts in OpenVMS systems prior to Version 
5.2. 


/GENERATE_PASSWORD[=keyword] 

/NOGENERATE_PASSWORD (default) 

Invokes the password generator to create user passwords. Generated passwords 
can consist of 1 to 10 characters. Specify one of the following keywords: 
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BOTH Generate primary and secondary passwords. 


CURRENT Do whatever the DEFAULT account does (for example, 
generate primary, secondary, both, or no passwords). This 
is the default keyword. 


PRIMARY Generate primary password only. 
SECONDARY Generate secondary password only. 


When you modify a password, the new password expires automatically; it is 
valid only once (unless you specify /NOPWDEXPIRED). On login, users are 
forced to change their passwords (unless you specify /FLAGS=DISFORCE_PWD_ 
CHANGE). 


Note that the /GENERATE_PASSWORD and /PASSWORD qualifiers are 
mutually exclusive. 


ANTERACTIVE[ =(rangef,...])] 

/NOINTERACTIVE 

Specifies the hours of access for interactive logins. For a description of the 
range specification, see the /ACCESS qualifier. By default, there are no access 
restrictions on interactive logins. 


/JTQUOTA=value 
Specifies the initial byte quota with which the jobwide logical name table is to be 
created. By default, the value is 4096 on VAX systems and 4096 on AXP systems. 


/LGICMD=filespec 

Specifies the name of the default login command file. The file name defaults to 
the device specified for /DEVICE, the directory specified for /DIRECTORY, a file 
name of LOGIN, and a file type of .COM. If you select the defaults for all these 
values, the file name is SYS$SYSTEM:[USER]JLOGIN.COM. 


/LOCAL[=(range....])] 

Specifies hours of access for interactive logins from local terminals. For a 
description of the range specification, see the /ACCESS qualifier. By default, 
there are no access restrictions on local logins. 


/MAXACCTJOBS=value 

Specifies the maximum number of batch, interactive, and detached processes that 
can be active at one time for all users of the same account. By default, a user has 
a maximum of 0, which represents an unlimited number. 


/MAXDETACH=value 

Specifies the maximum number of detached processes with the cited user name 
that can be active at one time. To prevent the user from creating detached 
processes, specify the keyword NONE. By default, a user has a value of 0, which 
represents an unlimited number. 


/MAXJOBS=value 

Specifies the maximum number of processes (interactive, batch, detached, and 
network) with the cited user name that can be active simultaneously. The first 
four network jobs are not counted. By default, a user has a maximum value of 0, 
which represents an unlimited number. 
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/MODIFY_IDENTIFIER (default) 

/NOMODIFY_IDENTIFIER 

Specifies whether the identifier associated with the user is to be modified in the 
rights database. This qualifier applies only when you modify the UIC or user 
name in the UAF record. By default, the associated identifiers are modified. 


/NETWORK[=(range,...])] 

Specifies hours of access for network batch jobs. For a description of how to 
specify the range, see the /ACCESS qualifier. By default, there are no access 
restrictions on network logins. 


/OWNER=owner-name 

Specifies the name of the owner of the account. You can use this name for billing 
purposes or similar applications. The owner name is 1 to 31 characters. There is 
no default owner name. 


/PASSWORD=(password1[,password2]) 

/NOPASSWORD 

Specifies up to two passwords for login. Passwords can be from 0 to 32 characters 
in length and can include alphanumeric characters, dollar signs, and underscores. 
Avoid using the word password as the actual password. Use the /PASSWORD 
qualifier as follows: 


¢ To set only the first password and clear the second, specify 
/PASSWORD=password. 


¢ To set both the first and second password, specify /PASSWORD=(password1, 
password2). 


¢ To change the first password without affecting the second, specify 
/PASSWORD=(password, ""). 


¢ To change the second password without affecting the first, specify 
/PASSWORD=("", password). 


¢ To set both passwords to null, specify /NOPASSWORD. 


When you modify a password, the new password expires automatically; it is valid 
only once (unless you specify /NOPWDEXPIRED). On login, the user is forced to 
change the password (unless you specify /FLAGS=DISFORCE_PWD_CHANGE). 


Note that the /(GENERATE_PASSWORD and /PASSWORD qualifiers are 
mutually exclusive. 


By default, the ADD command assigns the password USER. When you create 
a new UAF record with the COPY or RENAME command, you must specify a 
password. Avoid using the word password as the actual password. 


/PGFLQUOTA=value 

Specifies the paging file limit. This is the maximum number of pages that the 
person’s process can use in the system paging file. By default, the value is 32768 
pages on VAX systems and 50000 pagelets on AXP systems. 


/PRCLM=value 

Specifies the subprocess creation limit. This is the maximum number of 
subprocesses that can exist at one time for the specified user’s process. By 
default, the value is 2 on VAX systems and 8 on AXP systems. 
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/PRIMEDAYS=([NOjday[,...]) 

Defines the primary and secondary days of the week for logging in. Specify the 
days as a list separated by commas, and enclose the list in parentheses. To 
specify a secondary day, prefix the day with NO (for example, NOFRIDAY). To 
specify a primary day, omit the NO prefix. 


By default, primary days are Monday through Friday and secondary days are 
Saturday and Sunday. If you omit a day from the list, AUTHORIZE uses the 
default value. (For example, if you omit Monday from the list, AUTHORIZE 

defines Monday as a primary day.) 


Use the primary and secondary day definitions in conjunction with such qualifiers 
as /ACCESS, /INTERACTIVE, and /BATCH. 


/PRIORITY=value 
Specifies the default base priority. The value is an integer in the range of 0 to 31. 
By default, the value is set to 4 for timesharing users. 


/PRIVILEGES=([NO]privnamef],...]) 

Specifies which privileges the user is authorized to hold, although these privileges 
are not necessarily enabled at login. (The /DEFPRIVILEGES qualifier determines 
which ones are enabled.) A NO prefix removes the privilege from the user. 

The keyword NOALL disables all user privileges. There are many privileges 
available with varying degrees of power and potential system impact (see the 
Security Guide for a detailed discussion). By default, a user holds TMPMBX and 
NETMBxX privileges. 


/PWDEXPIRED (default) 

/NOPWDEXPIRED 

Specifies the password is valid for only one login. Users must change their 
passwords immediately after login or be locked out of the system. For a week 
prior to expiration, the system warns users of the upcoming password expiration. 
They can either specify a new password during the week with the DCL command 
SET PASSWORD or wait until expiration and be forced to change. By default, a 
user has to change a password when first logging in to an account. 


/PWDLIFETIME=time (default) 

/NOPWDLIFETIME 

Specifies the length of time a password is valid. Specify a delta time value in the 
form [dddd-] [hh:mm:ss.cc]. For example, for a lifetime of 120 days, 0 hours, and 
0 seconds, specify /PWDLIFETIME="120-". For a lifetime of 120 days 12 hours, 
30 minutes and 30 seconds, specify /PWDLIFETIME="120-12:30:30". If a period 
longer than the specified time elapses before the user logs in, the system displays 
a warning message. The password is marked as expired. 


To prevent a password from expiring, specify the time as NONE. By default, a 
password expires in 90 days. 


/PWDMINIMUM=value 

Specifies the minimum password length in characters. Note that this value 

is enforced only by the DCL command SET PASSWORD. It does not prevent 
you from entering a password shorter than the minimum length when you use 
AUTHORIZE to create or modify an account. By default, a password must have 
at least 6 characters. The value specified by the /PWDMINIMUM qualifier 
conflicts with the value used by the /GENERATE_PASSWORD qualifier or the 
DCL command SET PASSWORD/GENERATE, the operating system chooses the 
lesser value. The maximum value for generated passwords is 10. 
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/REMOTE[=(range[,...])] 

Specifies hours during which access is permitted for interactive logins from 
network remote terminals (with the DCL command SET HOST). For a description 
of the range specification, see the /ACCESS qualifier. By default, remote logins 
have no access restrictions. 


/SHRFILLM=value 

Specifies the maximum number of shared files that the user can have open at one 
time. By default, the system assigns a value of 0, which represents an infinite 
number. 


/TQELM 

Specifies the total number of entries in the timer queue plus the number of 
temporary common event flag clusters that the user can have at one time. By 
default, a user can have 10. 


/UIC=value 

Specifies the user identification code (UIC). The UIC value is a group number in 
the range from 1 to 37776 (octal) and a member number in the range from 0 to 
177776 (octal), which are separated by a comma and enclosed in brackets. Digital 
reserves group 1 and groups 300-377 for its own use. 


Each user must have a unique UIC. By default, the UIC value is [200,200]. 


/WSDEFAULT=value 

Specifies the default working set size. This represents the initial limit to the 
number of physical pages the process can use. (The user can alter the default 
quantity up to WSQUOTA with the DCL command SET WORKING_SET.) By 
default, a user has 256 pages on VAX systems and 2000 pagelets on AXP systems. 


/WSEXTENT=value 

Specifies the working set maximum. This represents the maximum amount 

of physical memory allowed to the process. The system provides memory to a 
process beyond its working set quota only when it has excess free pages. The 
additional memory is recalled by the system if needed. The value is an integer 
equal to or greater than WSQUOTA. By default, the value is 1024 pages on VAX 
systems and 16384 pagelets on AXP systems. 


/WSQUOTA=value 

Specifies the working set quota. This is the maximum amount of physical 
memory a user process can lock into its working set. It also represents the 
maximum amount of swap space that the system reserves for this process and 
the maximum amount of physical memory that the system allows the process to 
consume if the systemwide memory demand is significant. 


When you do not specify a value for a field, AUTHORIZE uses values from the 
DEFAULT record (excluding the default password, which is always USER). The 
DEFAULT account serves as a template for creating user records in the system 
user authorization file. 


AXP 
Username: DEFAULT 
Account 
CLI: DCL 
Default: SYSSSYSDEVICE: [USER] 
LGICMD: LOGIN 
Flags: DisUser 


Primary days: 
Secondary days: 
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On AXP systems, the DEFAULT account is as follows: 


Mon Tue Wed Thu Fri 


No access restrictions 


Expiration: 
Pwdlifetime: 
Last Login: 
Maxjobs: 
Maxacct jobs: 
Maxdetach: 
Prelm: 

Prio: 
Queprio: 
CPU: 


(none) 


Owner: 


UIC 


: [200,200] ([FIELD,USERP]) 


Tables: DCLTABLES 


Sat Sun 
(none) Pwdminimum: 
90 00:00 Pwdchange: 
(none) (interactive), 
0 Fillm: 100 Bytlm: 
0 Shrfilln: 0 Pbytim: 
0 BIOlm: 150 JTquota: 
8 DIOlm: 150 WSdef: 
4 ASTlm: 250 WSquo: 
0 TQElm: 10 WSextent 
Enqlm: 2000 Pgflquo: 


6 Login Fails: 0 
(pre-expired) 

(none) (non-interactive) 

64000 

0 

4096 

2000 

4000 

: 16384 

50000 


Authorized Privileges: 
TMPMBX NETMBX 

Default Privileges: 
TMPMBX NETMBX @ 


<> 


On VAX systems, the DEFAULT account is as follows: 


Username: DEFAULT Owner: 

Account: UIC: [200,200] ( [DEFAULT] ) 
CLI: DCL Tables: DCLTABLES 

Default: SYSS$SYSDEVICE: [USER] 

LGICMD: LOGIN 

Flags: DisUser 

Primary days: Mon Tue Wed Thu Fri 

Secondary days: Sat Sun 

No access restrictions 

Expiration: (none) Pwdminimum: 6 Login Fails: 0 
Pwdlifetime: 90 00:00 Pwdchange: (pre-expired) 

Last Login: (none) (interactive) (none) (non-interactive) 
Maxjobs: Q Fillm: 0 Bytlm: 32768 

Maxacct jobs: 0 Shrfillnm: 0 Pbytilm: 0 

Maxdetach: 0 BIOlm: 40 JTquota: 4096 

Prelm: 2 DIOlm: 40 WSdef: 256 

Prio: 4 ASTlm: 40 WSquo: 512 

Queprio: 0 TQE1m: 10 WSextent: 1024 

CPU: (none) Enqlm: 200 Pgflquo: 32768 


Authorized Privileges: 
TMPMBX NETMBX 

Default Privileges: 
TMPMBX NETMBX 


When you add a new account, specify values for fields that you want to be 
different. Typically, you do not need to change the default values for limits!, 
priority, privileges, or the command interpreter. As a result, you enter only the 
password, UIC, directory, owner, account, and device. 


1 Note that limits are also set by system parameters. To be effective, the limits you 


set through AUTHORIZE must be within the minimum limits determined by the 
corresponding system parameters (particularly those beginning with the PQL prefix). 
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When you add a record to the UAF, create a directory for the new user. Specify 
the device name, directory name, and UIC in the UAF record. The following DCL 
command creates a directory for user ROBIN: 


$ CREATE/DIRECTORY SYS$USER:[ROBIN] /OWNER_UIC=[ROBIN] 


Note 


When you add a new record to the UAF and a rights database exists, 
an identifier with the user name is added to the rights database 
automatically (unless you specify the /NOADD_IDENTIFIER qualifier). 
Similarly, when you specify an account name (other than the user 
name) that does not yet have an identifier, AUTHORIZE creates a group 
identifier in the rights database. 


1. UAF> ADD ROBIN /PASSWORD=SP0152/UIC=[014,006] - 
_/DEVICE=SYS$USER/DIRECTORY=[ROBIN ] /OWNER="JOSEPH ROBIN" /ACCOUNT=INV 
tUAF-I-ADDMSG, user record successfully added 
SUAF-I-RDBADDMSGU, identifier ROBIN value: [000014,000006] added to 

RIGHTSLIST. DAT , 
tUAF-I-RDBADDMSGU, identifier INV value: [000014,177777] added to 
RIGHTSLIST.DAT 


This example illustrates the typical ADD command and qualifiers. The record 
that results from this command appears in the description of the SHOW 
command. 


2. UAF> ADD WELCH /PASSWORD=SP0158/UIC=[014,051] - 
_/DEVICE=SYS$USER/DIRECTORY=[WELCH ] /OWNER="ROB WELCH"/FLAGS=DISUSER - 
_/ACCOUNT=INV/LGICMD=SECUREIN 
tUAF-I-ADDMSG, user record successfully added 
tUAF-I-RDBADDMSGU, identifier WELCH value: [000014,000051] added to 

RIGHTSLIST. DAT 
UAF> MODIFY WELCH/FLAGS=(RESTRICTED , DISNEWMAIL, DISWELCOME , NODISUSER) - 
_/NODIALUP=SECONDARY /NONETWORK=PRIMARY /CLITABLES=DCLTABLES - 
__/NOACCESS= (PRIMARY , 9-16, SECONDARY, 18-8) 
SUAF-I-MDFYMSG, user records updated 


The commands in this example add a record for a restricted account. 
Because of the number of qualifiers required, a MODIFY command is used in 
conjunction with the ADD command. This helps to minimize the possibility of 
typing errors. 


In the ADD command line, setting the DISUSER flag prevents the user 
from logging in until all the account parameters are set up. In the MODIFY 
command line, the DISUSER flag is disabled (by specifying NODISUSER) to 
allow access to the account. 


The record that results from these commands and an explanation of the 
restrictions the record imposes appear in the description of the SHOW 
command. 


AUTHORIZE 
ADD/IDENTIFIER 


ADD/IDENTIFIER 


Format 


Parameter 


Qualifiers 


Adds an identifier to the rights database. 


ADD/IDENTIFIER = [id-name] 


id-name 

Specifies the name of the identifier to be added to the rights database. If you omit 
the name, you must specify the /USER qualifier. The identifier name is a string 
of 1 to 31 alphanumeric characters. The name can contain underscores and dollar 
signs. It must contain at least one nonnumeric character. 


/ATTRIBUTES=(keyword[....]) 
Specifies attributes to be associated with the new identifier. The following are 
valid keywords: 


DYNAMIC Allows unprivileged holders of the identifier to 
remove and to restore the identifier from the 
process rights list by using the DCL command 
SET RIGHTS_LIST. 


fHOLDER_HIDDEN Prevents people from getting a list of users who 
hold an identifier, unless they own the identifier 
themselves. | 

+NAME_HIDDEN Allows holders of an identifer to have it 


translated, either from binary to ASCII or from 
ASCII to binary, but prevents unauthorized users 
from translating the identifer. 


tNO_ACCESS Makes any access rights of the identifier null 
and void. If a user is granted an identifier with 
the No Access attribute, that identifier has no 
effect on the user’s access rights to objects. This 
attribute is a modifier for an identifier with the 
Resource or Subsystem attribute. 


RESOURCE Allows holders of an identifier to charge disk 
space to the identifier. Used only for file objects. 
SUBSYSTEM Allows holders of the identifer to create and 


maintain protected subsystems by assigning the 
Subsystem ACE to the application images in the 
subsystem. Used only for file objects. 


VAX specific 
By default, none of these attributes is associated with the new identifier. 


/USER=user-spec 

Scans the UAF record for the specified user and creates the corresponding 
identifier. Specify user-spec by user name or UIC. You can use the asterisk 
wildcard to specify multiple user names or UICs. Full use of the asterisk and 
percent wildcards is permitted for user names; UICs must be in the form [*,*], 
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[n,*], [*,n], or [n,n]. A wildcard user name specification (*) creates identifiers 
alphabetically by user name; a wildcard UIC specification ({*,*]) creates them in 
numerical order by UIC. 


/VALUE=value-specifier 
Specifies the value to be attached to the identifier. The following are valid 
formats for the value-specifier: 


IDENTIFIER:n An integer value in the range of 65,536 to 
268,435,455. You can also specify the value in 
hexadecimal (precede the value with %X) or octal 
(precede the value with %O). 


The system displays this type of identifier in 
hexadecimal. To differentiate general identifiers 
from UIC identifiers, the system adds %X80000000 
to the value you specify. 


UIC:uic A UIC value in standard UIC format consists 
of a member name and, optionally, a group 
name enclosed in brackets. For example, 
[GROUP1,JONES] or [360,031]. 


In numeric UICs, the group number is an octal 
number in the range of 1 to 37776; the member 
number is an octal number in the range of 0 to 
177776. You can omit leading zeros when you are 
specifying group and member numbers. 
Regardless of the UIC format you use, the system 
translates a UIC to a 32-bit numeric value. 


Alphanumeric UICs are not allowed. 


Typically, system managers add identifiers as UIC values to represent system 
users; the system applies identifiers in integer format to system resources. 


1. UAF> ADD/IDENTIFIER/VALUE=UIC: [300,011] INVENTORY 
tUAF-I-RDBADDMSGU, identifier INVENTORY value: [000300,000011] added to 
RIGHTSLIST. DAT 


The command in this example adds an identifier named INVENTORY to the 
rights database. By default, the identifier is not marked as a resource. 


2. UAF> ADD/IDENTIFIER/ATTRIBUTES=(RESOURCE) - 
_/VALUE=IDENTIFIER: $X80011 PAYROLL 
$UAF-I-RDBADDMSGU, identifier PAYROLL value: %X80080011 added to 
RIGHTSLIST.DAT 


This command adds the identifier PAYROLL and marks it as a resource. To 
differentiate identifiers with integer values from identifiers with UIC values, 
%X80000000 is added to the specified code. 


AUTHORIZE 
ADD/PROXY 


ADD/PROXY 


Format 


Parameters 


Adds an entry to the network proxy authorization file). NETPROXY.DAT, and 
signals DECnet to update its volatile database. Proxy additions take effect 
immediately on all nodes in a cluster that share the proxy database. 


ADD/PROXY _ node::remote-user local-user{....] 


node 

Specifies a DECnet node name of 1 to 6 alphanumeric characters. If you provide 
an asterisk (*), the specified remote user on all nodes is served by the account 
defined as local-user. 


remote-user 
Specifies the user name of a user at a remote node. If you specify an asterisk, all 
users at the specified node are served by the local user. 


For nonOpenVMS systems that implement DECnet Phase IV+, specifies the UIC 
of a user at a remote node. You can specify a wildcard asterisk in the group and 
member fields of the UIC. 


local-user 
Specifies the user names of 1 to 16 users on the local node. If you specify an 
asterisk, a local-user name equal to remote-user name will be used. 


Positional Qualifier 


Description 


/DEFAULT 

Establishes the specified user name as the default proxy account. The remote 
user can request proxy access to an authorized account other than the default 
proxy account by specifying the name of the proxy account in the access control 
string of the network operation. 


The ADD/PROXY command adds an entry to the network proxy authorization 
file, NETPROXY.DAT, and signals DECnet to update its volatile database. Proxy 
additions take effect immediately on all nodes in a cluster that share the proxy 
database. 


You can grant a remote user access to one default proxy account and up to 15 
other local accounts. To access proxy accounts other than the default proxy 
account, remote users specify the requested account name in an access control 
string. To change the default proxy account, use the AUTHORIZE command 
MODIFY/PROXY. 


Proxy login is an effective way to avoid specifying (and, possibly, revealing) 
passwords in command lines. However, you must use caution in granting access 
powers to remote users. While logged in to the local system, remote users can 
apply the full DCL command set (with the exception of SET HOST). A remote 
user receives the default privileges of the local user and, therefore, becomes the 
owner of the local user’s files when executing any DCL commands. 
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To avoid potential security compromises, Digital recommends that you create 
proxy accounts on the local node that are less privileged than a user’s normal 
account on the remote node. By adding an extension such as _N, you can identify 
the account as belonging to a remote user, while distinguishing it from a native 
account with the same name on the local node. For example, the following 
command creates a JONES_N proxy account on the local node that allows the 
user JONES to access the account from the remote node SAMPLE: 


UAF> ADD/PROXY SAMPLE::JONES JONES N/DEFAULT 
tUAF-I-NAFADDMSG, record successfully added to NETPROXY.DAT 


For more information on creating proxy accounts, see the Security Guide. 


1. UAF> ADD/PROXY SAMPLE::WALTER ROBIN/DEFAULT 
$UAF-I-NAFADDMSG, record successfully added to NETPROXY.DAT 
Specifies that user WALTER on remote node SAMPLE has proxy access to 
user ROBIN’s account on local node AXEL. Through proxy login, WALTER 
receives the default privileges of user ROBIN when he accesses node AXEL 
remotely. 


2. UAF> ADD/PROXY MISHA::* MARCO/DEFAULT, OSCAR 
$UAF-I-NAFADDMSG, record successfully added to NETPROXY.DAT 


Specifies that any user on the remote node MISHA can, by default, use the 
MARCO account on the local node for DECnet tasks such as remote file 
access. Remote users can also access the OSCAR proxy account by specifying 
the user name OSCAR in the access control string. 


3. UAF> ADD/PROXY MISHA::MARCO */DEFAULT 
SUAF-I-NAFADDMSG, record successfully added to NETPROXY.DAT 


Specifies that user MARCO on the remote node MISHA can use only the 
MARCO account on the local node for remote file access. 


Creates a new SYSUAF record that duplicates an existing UAF record. 


COPY oldusername newusername 


oldusername 
Name of an existing user record to serve as a template for the new record. 


newusername 
Name for the new user record. The user name is a string of 1 to 12 alphanumeric 
characters. 


Qualifiers 


Description 


Examples 


AUTHORIZE 
COPY 


Excluding the /MODIFY_IDENTIFIER qualifier, all the qualifiers listed under the 
ADD command apply to the COPY command. 


The COPY command creates a new SYSUAF record that duplicates an existing 
SYSUAF record. The command requires the (PASSWORD qualifier. If you do not 
specify additional qualifiers to the COPY command, the fields in the record you 
create are the same as those in the record being copied. 


Note 


AUTHORIZE now sets the salt value associated with a new user’s account 
password to a random value whenever a new account is created. Prior to 
OpenVMS VAX Version 6.0, the COPY command did not always set the 
salt value for new accounts. 


For example, you could add a record for a new user named Thomas Sparrow that 
is identical to that of Joseph Robin (but presumably different from the default 
record), as follows: 


UAF> COPY ROBIN SPARROW /PASSWORD=SP0152 


However, to add a record for Thomas Sparrow that differs from Joseph Robin’s in 
the UIC, directory name, password, and owner, specify the following command: 


UAF> COPY ROBIN SPARROW /UIC=[200,13]/DIRECTORY=[SPARROW] - 
_/PASSWORD=THOMAS/OWNER="THOMAS SPARROW" 


You can also use the COPY command to create a set of template records to meet 
the specific needs of various user groups. For example, if you have programmers, 
administrators, and data entry personnel working on the same system, you can 
create records such as PROGRAMMER, ADMINISTRATOR, and DATA_ENTRY, 
each tailored to the needs of a particular group. To add an account for a new user 
in one of these groups, copy the appropriate template record and specify a new 
user name, password, UIC, directory, and owner. _ 


If you omit the /PASSWORD qualifier when you create an account, AUTHORIZE 
displays the following error message: 


$UAF-W-DEFPWD, copied or renamed records must receive new password 


To specify a password for the account, use the MODIFY command with the 
/PASSWORD qualifier. . 


1. UAF> COPY ROBIN SPARROW /PASSWORD=SP0152 
tUAF-I-COPMSG, user record copied 
tUAF-E-RDBADDERRU, unable to add SPARROW value: [000014,00006] to 
RIGHTSLIST.DAT -SYSTEM-F-DUPIDENT, duplicate identifier 


The command in this example adds a record for Thomas Sparrow that 

is identical, except for the password, to that of Joseph Robin. Note that 
because there is no change in the UIC value, no identifier is added to 
RIGHTSLIST.DAT. AUTHORIZE issues a “duplicate identifier” error message. 
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2. UAF> COPY ROBIN SPARROW /UIC=[200,13]/DIRECTORY=[SPARROW] - 
/PASSWORD=THOMAS /OWNER="THOMAS SPARROW" 
$UAF-I-COPMSG, user record copied 
$UAF-I-RDBADDMSGU, identifier SPARROW value: [000200,000013] added to 
RIGHTSLIST.DAT 


The command in this example adds a record for Thomas Sparrow that is the 
same as Joseph Robin’s except for the UIC, directory name, password, and 
owner. Note that you could use a similar command to copy a template record 
when adding a record for a new user in a particular user group. 


CREATE/PROXY 


Format 


Parameters 


Qualifiers 


Description 


Example 
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Creates and initializes the network proxy authorization file, 
NETPROXY.DAT. 


CREATE/PROXY 
None. 
None. 


NETPROXY.DAT is created with no records and is assigned the following 
protection: 


(S:RWED,O:RWED,G,W) 


If NETPROXY.DAT already exists, AUTHORIZE reports the following error 
message: 


$UAF-W-NAFAEX, NETPROXY.DAT already exists 


To create a new file, you must either delete or rename the old one. 


UAF> CREATE/PROXY 
UAF> 


The command in this example creates and initializes the network proxy 
authorization file. 


AUTHORIZE 
CREATE/RIGHTS 


CREATE/RIGHTS 


Format 


Parameters 


Qualifiers 


Description 


Example 


DEFAULT 


Format 


Parameters 


Creates and initializes the rights database, RIGHTSLIST. DAT. 
CREATE/RIGHTS 
None. 


None. 


RIGHTSLIST.DAT is created with no records and is assigned the following 
protection: 


(S:RWED,O:RWED,G:RWE,W:R) | (AXP Only) 
(S:RWED,O:RWED,G:R,W:) | (VAX Only) 


Note that the file is created only if the file does not already exist. 


UAF> CREATE/RIGHTS 
$UAF-E-RDBCREERR, unable to create RIGHTSLIST.DAT 
~RMS-E-FEX, file already exists, not superseded 


You can use the command in this example to create and initialize a new rights 
database. Note, however, that RIGHTSLIST.DAT is created automatically during 
the installation process. Thus, you must delete or rename the existing file before 
creating a new one. For more information on rights database management, refer 
to the Security Guide. 


Modifies the SYSUAF’s DEFAULT record. 
DEFAULT 


None. 
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Qualifiers 


See the qualifiers listed under the ADD command. 


Description 


Modify the DEFAULT record when qualifiers normally assigned to a new user 
differ from the Digital-supplied values. The following qualifiers most often need 
modification: 


Example 


/CLI—If the command interpreter is MCR. 
/DEVICE—If most users have the same default device. 


/LGICMD—When automation of initial housekeeping chores at login time 
is desired through a specific login command file. The system automates the 
execution of login command file in the following way: 


First the system checks whether the logical name SYS$SYLOGIN has been 
defined. If it has, the name is translated (in most cases to SYLOGIN.COM), 
and the named command file is executed. (This command file can call other 
login command files.) However, when it completes, the system makes another 
check. If the user’s LGICMD field in the UAF specifies a command file, that 
file is executed. If LGICMD is blank, the user’s file LOGIN.COM is executed 
automatically if the command interpreter is DCL. (In this case, all users must 
name their login command files LOGIN.COM.) If the command interpreter is 
MCR, the user’s file LOGIN.CMD is executed automatically. 


Thus, the login protocol generally consists of a systemwide login command file 
followed by a user-specific login command file. 

/PRIVILEGES—When users are given different privileges than those supplied 
by Digital. 


Quota qualifiers—When the default quotas are insufficient or inappropriate 
for mainstream work. 


UAF> DEFAULT /DEVICE=SYSSUSER/LGICMD=SYS$MANAGER:SECURELGN - 
_UAF> /PRIVILEGES= ( TMPMBX , GRPNAM, GROUP) 
$UAF-I-MDFYMSG, user record(s) updated 


The command in this example modifies the DEFAULT record, changing the 
default device, default login command file, and default privileges. 


EXIT 


Enables you to exit from AUTHORIZE and return to DCL command level. You 
can also return to command level by pressing Ctrl/Z. 


Format 


EXIT 
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None. 


None. 


GRANT/IDENTIFIER 


Format 


Parameters 


Qualifier 


Assigns the specified identifier to the user and documents the user as a holder of 
the identifier in the rights database. 


GRANT/IDENTIFIER id-name user-spec 


id-name 

Specifies the identifier name. The identifier name is a string of 1 to 31 
alphanumeric characters that can contain underscores and dollar signs. The 
name must contain at least one nonnumeric character. 


user-spec 

Specifies the UIC identifier that uniquely identifies the user on the system. 
This type of identifier appears in alphanumeric format. For example: 
[GROUP1,JONES]. 


/ATTRIBUTES=(keyword....]) 
Specifies attributes to be associated with the identifier. The following are valid 
keywords: 


DYNAMIC Allows unprivileged holders of the identifier to 
remove and to restore the identifier from the 


process rights list by using the DCL command 
SET RIGHTS_LIST. 


*fHOLDER_HIDDEN Prevents people from getting a list of users who 
hold an identifier, unless they own the identifier 
themselves. 

t+NAME_HIDDEN Allows holders of an identifer to have it 


translated, either from binary to ASCII or from 
ASCII to binary, but prevents unauthorized users 
from translating the identifer. 


{VAX specific 
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+NO_ACCESS Makes any access rights of the identifier null 
and void. If a user is granted an identifier with 
the No Access attribute, that identifier has no 
effect on the user’s access rights to objects. This 
attribute is a modifier for an identifier with the 
Resource or Subsystem attribute. 


RESOURCE | Allows holders of an identifier to charge disk 
space to the identifier. Used only for file objects. 


TSUBSYSTEM Allows holders of the identifer to create and 
maintain protected subsystems by assigning the 
Subsystem ACE to the application images in the 
subsystem. Used only for file objects. 

VAX specific 


To remove an attribute from the identifier, add a NO prefix to the 
attribute keyword. For example, to remove the Resource attribute, specify 
/ATTRIBUTES=NORESOURCE. 


Example 


UAF> GRANT/IDENTIFIER INVENTORY [300,015] 
$UAF-I-GRANTMSG, identifier INVENTORY granted to CRAMER 


The command in this example grants the identifier INVENTORY to a user with 
the UIC [300,015]. The user Cramer becomes the holder of the identifier and any 
resources associated with it. The following command produces the same result: 


UAF> GRANT/IDENTIFIER INVENTORY CRAMER 


HELP 


Displays information concerning the use of AUTHORIZE, including formats and 
explanations of commands, parameters, and qualifiers. 

Format 
HELP [keyword[....] 


Parameter 


keyword[....] 
Specifies one or more keywords that refer to the topic, command, qualifier, 
or parameter on which you want information from the AUTHORIZE HELP 
command. 

Qualifiers 


None. 
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If you do not specify a keyword, HELP displays information on the topics and 
commands for which help is available. It then prompts you with “Topic?”. You 
can supply a topic or a command name, or press Return. When you specify a 
command name and qualifiers, you get detailed information about that command. 
If you respond by pressing Return, you exit from help. You can also exit from 
help by pressing Ctrl/Z. 


If the command you request accepts qualifiers, the display of. the help information 
on the command is followed by the prompt “Subtopic?”. Respond to this prompt 
with a qualifier name, or press Return. If you respond by pressing Return, HELP 
prompts with “Topic?”. If you want to exit from help directly from this level, press 
Ctrl/Z. 


1. UAF> HELP ADD 


The HELP command in this example displays information about the ADD 
' command: 


ADD 


Adds a user record to the SYSUAF and corresponding identifiers to 
the rights database. 


Format 
ADD newusername 
Additional information available: 


Parameter Qualifiers 


/ACCESS /ACCOUNT /ADD IDENTIFIER /ALGORITHM /ASTLM /BATCH 
/BIOLM /BYTLM /CLI /CLITABLES /CPUTIME /DEFPRIVILEGES 
/DEVICE /DIALUP . /DIOLM /DIRECTORY /ENQLM /EXPIRATION 

/FILLM /FLAGS /GENERATE_ PASSWORD / INTERACTIVE /ITQUOTA 
/LGICMD /LOCAL /MAXACCTJOBS /MAXDETACH /MAXJOBS 
/MODIFY_IDENTIFIER /NETWORK /OWNER /PASSWORD /PGFLQUOTA /PRCLM 
/PRIMEDAYS /PRIORITY /PRIVILEGES /PWDEXPIRED 

/PWDLIFETIME /PWDMINIMUM /REMOTE /SHRFILLM /TQELM 
/UIC /WSDEFAULT /WSEXTENT /WSQUOTA 

Examples /IDENTIFIER /PROXY 


ADD Subtopic? 


2. UAF> HELP MODIFY/WSDEFAULT 


The command in this example displays information about the /(WSDEFAULT 
qualifier: 


MODIFY 
/WSDEFAULT=value 


Specifies the default working set size. This represents the 

initial limit to the number of physical pages the process can 

use. (The user can alter the default quantity up to WSQUOTA with 

the DCL command SET WORKING SET.) The minimum value is 50 pages 

(on VAX systems) and 150 pagelets (on AXP systems). By default, a user 
has 150 pages (on VAX systems) and 150 pagelets (on AXP systems). 
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Format 


Parameter 


Qualifiers 


Description 
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Writes reports for selected UAF records to a listing file, SYSUAF.LIS. 


LIST [user-spec] 


user-spec 

Specifies the user name or UIC of the requested UAF record. Without the user- 
spec parameter, AUTHORIZE lists the user records of all users. The asterisk and 
percent sign wildcards are permitted in the user name. 


/BRIEF 
Specifies that a brief report be written to SYSUAF.LIS. The /BRIEF qualifier is 
the default qualifier. 


/FULL 
Specifies that a full report be written to SYSUAF'LIS, including identifiers held 
by the user. 


The LIST command creates a listing file of reports for selected UAF records. 
Print the listing file, SYSUAF.LIS, with the DCL command PRINT. 


Specification of a user name results in a single-user report. Specification of the 
asterisk wildcard character following the LIST command results in reports for 
all users in ascending sequence by user name. Specification of a UIC results in 
reports for all users with that UIC. (Digital recommends that you assign each 
user a unique UIC, but if users share a UIC, the report will show all users with 
that UIC.) You can use the asterisk wildcard character to specify the UIC. 


Table 5-2 shows how to specify a UIC with the LIST command and use the 
asterisk wildcard character with the UIC specification to produce various types of 
reports. 


Table 5-2 UIC Specification with the LIST Command 


Command Description 

LIST [14,6] Lists a full report for the user (or users) with 
member number 6 in group 14. 

LIST [14,*] /BRIEF Lists a brief report for all users in group 14, in 
ascending sequence by member number. 

LIST [*,6] /BRIEF Lists a brief report for all users with a member 


number of 6. 
(continued on next page) 


Examples 


AUTHORIZE 


LIST 
Table 5-2 (Cont.) UIC Specification with the LIST Command 
Command Description 
LIST [*,*] /BRIEF Lists a brief report for all users, in ascending 


sequence by UIC. 


Although you must provide separate UICs for each user, the LIST command 
reports users with the same UIC in the order in which they were added to the 
SYSUAF. Full reports list the details of the limits, privileges, login flags, and 
command interpreter. Brief reports do not include the limits, login flags, or 
command interpreter, nor do they summarize the privileges. AUTHORIZE never 
displays the password for an account. 


See the SHOW command for examples of brief and full reports. 


1. UAF> LIST ROBIN/FULL 
$UAF-I-LSTMSG1, writing listing file 
SUAF-I-LSTMSG2, listing file SYSUAF.LIS complete 


This command lists a full report for the user record ROBIN. 


2. UAF> LIST * 
SUAF-I-LSTMSG1, writing listing file 
tUAF-I-LSTMSG2, listing file SYSUAF.LIS complete 


This command results in brief reports for all users in ascending sequence by 
user name. Note, however, that this is the same result you would produce 
had you omitted the asterisk wildcard. 


3. UAF> LIST [300.*] | 
SUAF-I-LSTMSG1, writing listing file 
SUAF-I-LSTMSG2, listing file SYSUAF.LIS complete 


This command lists a brief report for all user records with a group UIC of 
300. | 


LIST/IDENTIFIER 


Format 


Parameter 


Creates a listing file (RIGHTSLIST.LIS) in which identifier names, attributes, 
values, and holders are written. 


LISTADENTIFIER  [id-name] 


id-name 
Specifies an identifier name. You can specify the asterisk wildcard character (* ) 
to list all identifiers. If you omit the identifier name, you must specify /USER or 
/VALUE. 
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/BRIEF 
Specifies a brief listing in which only the identifier name, value and attributes 
appear. 


/FULL 

Specifies a full listing, in which the names of the identifier’s holders are displayed 
along with the identifier’s name, value, and attributes. The /FULL qualifier 
specifies the default listing format. 


/USER=user-spec 

Specifies one or more users whose identifiers are to be listed. User-spec can 

be a user name or UIC. You can use the asterisk wildcard to specify multiple 
user names or UICs. UICs must be in the form [*,*], [n,*], [*,n], or [n,n]. A 
wildcard user name specification (*) lists identifiers alphabetically by user name; 
a wildcard UIC specification ([*,*]) lists them numerically by UIC. 


/VALUE=vaiue-specifier 
Specifies the value of the identifier to be listed. The following are valid formats 
for the value-specifier: 


IDENTIFIER:n An integer value in the range 65,536 to 268,435,455. 
You can also specify the value in hexadecimal 
(precede the value with %X) or octal (precede the 
value with %0O). 
To differentiate general identifiers from UIC 
identifiers, %X80000000 is added to the value 
you specify. 

UIC:uic A UIC value in the standard UIC format. 


The LIST/IDENTIFIER command creates a listing file in which identifier names, 
attributes, values, and holders are displayed in various formats depending on the 


qualifiers specified. Two of these formats are illustrated in the description of the 
SHOW/IDENTIFIER command. 


Print the listing file named RIGHTSLIST.LIS with the DCL command PRINT. 


1. UAF> LIST/IDENTIFIER INVENTORY 
tUAF-I-LSTMSG1, writing listing file 
tUAF-I-RLSTMSG, listing file RIGHTSLIST.LIS complete 


The command in this example generates a full listing for the identifier 
INVENTORY, including its value (in hexadecimal), holders, and attributes. 


2. UAF> LIST/IDENTIFIER/USER=ANDERSON 
SUAF-I-LSTMSG1, writing listing file 
SUAF-I-RLSTMSG, listing file RIGHTSLIST.LIS complete 


This command lists an identifier associated with the user ANDERSON, along 
with its value and attributes. Note, however, that this is the same result you 
would produce had you specified ANDERSON’s UIC with the following forms 
of the command: 


LIST/PROXY 


Format 
Parameters 
Qualifiers 


Description 


Example 


AUTHORIZE 
LIST/IDENTIFIER 


UAF> LIST/IDENTIFIER/USER=[ 300,015] 
UAF> LIST/IDENTIFIER/VALUE=UIC: [300,015] 


Creates a listing file of the network proxy database entries. 


LIST/PROXY 


None. 


None. 


Use the DCL command PRINT to print the listing file, NETPROXY.LIS. The 
output assumes the same format as that of the SHOW/PROXY command. For an 
example of the output format, see the description of the SHOW/PROXY command. 


UAF> LIST/PROXY 

SUAF-I-LSTMSG1, writing listing file 

$UAF-I-NETLSTMSG, listing file NETPROXY.LIS complete 

The command in this example creates a listing file of all the entries in the 
network proxy database. 


LIST/RIGHTS 


Format 


Parameter 


Lists identifiers held by the specified identifier or, if /USER is specified, all 
identifiers held by the specified users. 


LIST/RIGHTS _ [id-name] 


id-name ; 
Specifies the name of the identifier associated with the user. If you omit the 
identifier name, you must specify the /USER qualifier. 
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LIST/RIGHTS 


Qualifier 


Description 


Example 


MODIFY 


Format 


Parameter 


Qualifiers 


Description 
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/USER=user-spec 

Specifies a user whose identifiers are to be listed. User-spec can be a user name 
or UIC. You can use the asterisk wildcard to specify multiple UICs or all user 
names. UICs must be in the form [*,*], [n,*], [*,n], or [n,n]. A wildcard user 
name specification (*) or wildcard UIC specification ([*,*]) lists all identifiers 
held by users. The wildcard user name specification lists holders’ user names 
alphabetically; the wildcard UIC specification lists them in the numerical order of 
their UICs. 


Use the DCL command PRINT to print the listing file (RIGHTSLIST-.LIS) 
produced by the LIST/RIGHTS command. For an example of the output format, 
see the description of the SHOW/RIGHTS command. 


UAF> LIST/RIGHTS PAYROLL 
tUAF-I-LSTMSG1, writing listing file 
SUAF-I-RLSTMSG, listing file RIGHTSLIST.LIS complete 


The command in this example lists identifiers held by PAYROLL, providing 
PAYROLL is the name of a UIC format identifier. 


Changes values in a SYSUAF user record. Qualifiers not specified in the 
command remain unchanged. 


MODIFY username /quailifier{,...] 


username . 

Specifies the name of a user in the SYSUAF. The asterisk and percent sign 
wild card characters are permitted in the user name. When you specify a single 
asterisk for the user name, you modify the records of all users. 


See the qualifiers listed under the ADD command. 


The MODIFY command changes values in a SYSUAF user record. Most values 
not in the command remain unchanged. If the UIC is changed, the value of the 
corresponding identifier is also changed. 


Modifications to the user record are not retroactive; thus, any changes to quota 
values apply to the next process that is created but not to the current one. 


Examples 


AUTHORIZE 
MODIFY 


1. UAF> MODIFY ROBIN /PASSWORD=SP0172 
$UAF-I-MDFYMSG, user record(s) updated 


The command in this example changes the password for user ROBIN without 
altering any other values in the record. 


2. UAF> MODIFY ROBIN/FLAGS=RESTRICTED 
SUAF-I-MDFYMSG, user record(s) updated 


The command in this example modifies the UAF record for user ROBIN by 
adding the login flag RESTRICTED. 


Modifies an identifier name, its associated value, or its attributes in the rights 


MODIFY/IDENTIFIER 

database. 
Format 

MODIFY/IDENTIFIER 
Parameter 


Qualifiers 


id-name 


Specifies the name of an identifier to be modified. 


/ATTRIBUTES=(keyword{....]) 


Specifies attributes to be associated with the modified identifier. The following 


are valid keywords: 
DYNAMIC 


+tHOLDER_HIDDEN 


tNAME_HIDDEN 


tNO_ACCESS 


TVAX specific 


Allows unprivileged holders of the identifier to 
remove and to restore the identifier from the 
process rights list by using the DCL command 
SET RIGHTS_LIST. 


Prevents people from getting a list of users who 
hold an identifier, unless they own the identifier 
themselves. 


Allows holders of an identifer to have it 
translated, either from binary to ASCII or from 
ASCII to binary, but prevents unauthorized users 
from translating the identifer. 


Makes any access rights of the identifier null 
and void. Ifa user is granted an identifier with 
the No Access attribute, that identifier has no 
effect on the user’s access rights to objects. This 
attribute is a modifier for an identifier with the 
Resource or Subsystem attribute. 
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AUTHORIZE 


MODIFY/IDENTIFIER 

RESOURCE Allows holders of an identifier to charge disk 
space to the identifier. Used only for file objects. 

+SUBSYSTEM Allows holders of the identifer to create and 
maintain protected subsystems by assigning the 
Subsystem ACE to the application images in the 
subsystem. Used only for file objects. 

VAX specific 


Description 


Examples 
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To remove an attribute from the identifier, add a NO prefix to the 
attribute keyword. For example, to remove the Resource attribute, specify 
/ATTRIBUTES=NORESOURCE. 


Note 


If you specify the NORESOURCE keyword and do not name any holder 
(that is, if you do not use the /HOLDER qualifier), all holders lose the 
right to charge resources. 


/HOLDER=username 
Specifies the holder of an identifier whose attributes are to be modified. The 
/HOLDER qualifier is used only in conjunction with the /ATTRIBUTES qualifier. 


If you specify /HOLDER, the /NAME and /VALUE qualifiers are ignored. 


/NAME=new-id-name 
Specifies a new identifier name to be associated with the identifier. 


/VALUE=value-specifier 

Specifies a new identifier value. Note that an identifier value cannot be modified 
from a UIC to a non-UIC format or vice versa. The following are valid formats for 
the value-specifier: 


IDENTIFIER:n An integer value in the range of 65,536 to 
268,435,455. You can also specify the value in 
hexadecimal (precede the value with %X) or octal 
(precede the value with %O). 

To differentiate general identifiers from UIC 
identifiers, %X80000000 is added to the value 
you specify. 

UIC:uic A UIC value in the standard UIC format. 


The MODIFY/IDENTIFIER command changes identifier names, associated 
values, and attributes in the rights database. Values not specified in the 
command remain unchanged. 


1. UAF> MODIFY/IDENTIFIER OLD ID /NAME=NEW_ID 
SUAF-I-RDBMDFYMSG, identifier OLD ID modified 


The command in this example changes the name of the OLD_ID identifier to 
NEW_ID. 


AUTHORIZE 
MODIFY/IDENTIFIER 


2. UAF> MODIFY/IDENTIFIER/VALUE=UIC: [300,21] ACCOUNTING 
tUAF-I-RDBMDFYMSG, identifier ACCOUNTING modified 


The command in this example changes the old UIC value of the identifier 
ACCOUNTING to a new value. 


3. UAF> MODIFY/IDENTIFIER/ATTRIBUTES=NORESOURCE- 
_UAF> /HOLDER=CRAMER ACCOUNTING 
$UAF-I-RDBMDFYMSG, identifier ACCOUNTING modified 


The command in this example associates the attribute NORESOURCE with 
the identifier ACCOUNTING in CRAMER’s holder record. The identifier 
ACCOUNTING is not changed. 


MODIFY/PROXY 


Format 


Parameters 


Qualifier 


Description 


Modifies an entry in the network proxy authorization file 

(NETPROXY.DAT) to specify a different local account as the default proxy account 
for the remote user or to specify that there is no default proxy account for the 
remote user. 


MODIFY/PROXY node::remote-user 


node 
Specifies a node name (1 to 6 alphanumeric characters). If you specify an 
asterisk, the specified remote user on all nodes is served by the local user. 


remote-user 
Specifies the user name of a user at a remote node. If you specify an asterisk, all 
users at the specified node are served by the local user. 


For nonOpenVMS systems that implement DECnet Phase IV+, specifies the UIC 
of a user at a remote node. You can specify a wildcard asterisk in the group and 
member fields of the UIC. 


/DEFAULT[=local-user] 

/NODEFAULT 

Designates the default user name on the local node through which proxy access 
from the remote user is directed. If /NODEFAULT is specified, removes the 
default designation. 


Use the MODIFY/PROXY command to specify a different local account as 

the default proxy account for the remote user or to specify that there is no 
default proxy account for the remote user. Whenever you modify user entries, 
AUTHORIZE signals DECnet to update its volatile database. Proxy modifications 
take effect immediately on all nodes in a cluster that share the proxy database. 
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AUTHORIZE 


MODIFY/PROXY 


Example 


The first command in the following example grants remote user STIR:: YETTA 
proxy access to the PROXY1 and PROXY2 local accounts. The default proxy 
account is PROXY1. The second command is used to change the default proxy 
account to PROXY2. 


UAF> ADD/PROXY STIR::YETTA PROXY1/DEFAULT, PROXY2 


UAF> MODIFY/PROXY STIR::YETTA /DEFAULT=PROXY2 


The next example shows the command used to remove the default proxy 
designation. 


UAF> MODIFY/PROXY STIR::YETTA /NODEFAULT 


If you remove the default proxy designation as shown in the last command, 
remote user STIR::YETTA must include the name of the proxy account (PROXY1 
or PROXY2) in the access control string of each network operation to gain proxy 
access to the local system. 


If no default proxy account is specified either in the network proxy database or in 
the access control string of the DCL command, the system attempts to perform 
the network operation using the default DECnet account. 


UAF> MODIFY/PROXY MISHA::MARCO /DEFAULT=JOHNSON 
SUAF-I-NAFADDMSG, record successfully modified in NETPROXY.DAT 


The command in this example changes the default proxy account for user MARCO 
on the remote node MISHA to the JOHNSON account. 


MODIFY/SYSTEM_PASSWORD 


Format 


Parameter 


Qualifiers 


Description 
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Changes the system password in the same manner as the DCL command SET 
PASSWORD/SYSTEM. 


MODIFY/SYSTEM_PASSWORD=system-password 


system-password 
Specifies the new system password. 


None. 


For a detailed description of the effects of this command, refer to the discussion 
of the SET PASSWORD/SYSTEM command in the Security Guide. 


Example 


REMOVE 


Format 


Parameter 


Qualifier 


Description 


Example 


AUTHORIZE 
MODIFY/SYSTEM_PASSWORD 


UAF> MODIFY/SYSTEM PASSWORD=ABRACADABRA 
UAF> 


This command changes the system password to ABRACADABRA. 


Deletes a SYSUAF user record and corresponding identifiers in the rights 
database. The DEFAULT and SYSTEM records cannot be deleted. 


REMOVE username 


username 
Specifies the name of a user in the SYSUAF. 


/REMOVE_IDENTIFIER (default) 

/NOREMOVE_IDENTIFIER 

Specifies whether the user name and account name identifiers should be removed 
from the rights database when a record is removed from the UAF. If there are two 
UAF records with the same UIC, the user name identifier is removed only when 
the second record is deleted. Similarly, the account name identifier is removed 
only if there are no remaining UAF records with the same group as the deleted 
record. 


If you remove a SYSUAF record for a user who also appears as a local user in the 
network user authorization file (NETPROXY.DAT), every network authorization 
record for that user is also removed. 


UAF> REMOVE ROBIN 

SUAF-I-REMMSG, record removed from SYSUAF.DAT 

SUAF-I-RDBREMMSGU, identifier ROBIN value: [000014,000006] removed from 
RIGHTSLIST.DAT 


The command in this example deletes the record for user ROBIN from the 
SYSUAF and ROBIN’s UIC identifier from RIGHTSLIST.DAT. 
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AUTHORIZE 
REMOVE/IDENTIFIER 


REMOVE/IDENTIFIER 
Removes an identifier from the rights database. 


Format 
REMOVE/IDENTIFIER id-name 


Parameter 

id-name 

Specifies the name of an identifier in the rights database. 
Qualifiers 


None. 


Example 


UAF> REMOVE/IDENTIFIER Q1ISALES 
tUAF-I-RDBREMMSGU, identifier QISALES value %X80010024 removed from 
RIGHTSLIST.DAT 


The command in this example removes the identifier QISALES from the rights 
database. All of its holder records are removed with it. 


REMOVE/PROXY 


Deletes network proxy access for the specified remote user. 


Format 
REMOVE/PROXY  node::remote-user [local-user,...] 


Parameters 


node 
Specifies the name of a network node in the network proxy authorization file. 


remote-user 
Specifies the user name or UIC of a user on a remote node. The asterisk wildcard 
character is permitted in the remote-user specification. 


local-user 
Specifies the user name of from 1 to 16 users on the local node. If no local user is 
specified, proxy access to all local accounts is removed. 


Qualifiers 


None. 
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Example 


RENAME 


Format 


Parameters 


Qualifiers 


AUTHORIZE 
REMOVE/PROXY 


UAF> REMOVE/PROXY MISHA: :MARCO 
SUAF-I-NAFDONEMSG, record removed from NETPROXY.DAT 


The command in this example deletes the record for MISHA::MARCO from the 
network proxy authorization file, removing all proxy access to the local node for 


user MARCO on node MISHA. 


Changes the user name of the SYSUAF record (and, if specified, the 
corresponding identifier) while retaining the characteristics of the old record. 


RENAME oldusername newusername 


oldusername 
Specifies the current user name in the SYSUAF. 


newusername 

Specifies the new name for the user. It can contain 1 to 12 alphanumeric 
characters and underscores. Although dollar signs are permitted, they are 
usually reserved for system names. 


/GENERATE_PASSWORD[=keyword] 

/INOGENERATE_PASSWORD (default) 

Invokes the password generator to create user passwords. Generated passwords 
can consist of 1 to 10 characters. Specify one of the following keywords: 


BOTH Generate primary and secondary passwords. 

CURRENT Do whatever the DEFAULT account does (for example, 
generate primary, secondary, both, or no passwords). This 
is the default keyword. 

PRIMARY Generate primary password only. 

SECONDARY Generate secondary password only. 


When you modify a password, the new password expires automatically; it is 
valid only once (unless you specify /NOPWDEXPIRED). On login, users are 
forced to change their passwords (unless you specify /FLAGS=DISFORCE_PWD_ 
CHANGE). 


Note that the /(GENERATE_PASSWORD and /PASSWORD qualifiers are 
mutually exclusive. 


/MODIFY_IDENTIFIER (default) 

/NOMODIFY_IDENTIFIER 

Specifies whether the identifier associated with the user is to be modified in the 
rights database. This qualifier applies only when you modify the UIC or user 
name in the UAF record. By default, the associated identifiers are modified. 
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RENAME 


Description 


Examples 
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/PASSWORD=(password1[,password2]) 

/NOPASSWORD 

Specifies up to two passwords for login. Passwords can be from 0 to 32 characters 
in length and can include alphanumeric characters, dollar signs, and underscores. 
Avoid using the word password as the actual password. Use the /PASSWORD 
qualifier as follows: 


¢ To set only the first password and clear the second, specify 
/PASSWORD=password. 


¢ To set both the first and second password, specify /PASSWORD=(password1, 
password2). 


~ 


e To change the first password without affecting the second, specify 
/PASSWORD=(password, ""). 


¢ To change the second password without affecting the first, specify 
/PASSWORD=("", password). 


¢ To set both passwords to null, specify /NOPASSWORD. 


When you modify a password, the new password expires automatically; it is valid 
only once (unless you specify /NOPWDEXPIRED). On login, the user is forced to 
change the password (unless you specify /FLAGS=DISFORCE_PWD_CHANGE). 


Note that the /GENERATE_PASSWORD and /PASSWORD qualifiers are 
mutually exclusive. 


When you create a new UAF record with the RENAME command, you must 
specify a password. 


The RENAME command renames a SYSUAF record. It changes the user name of 
the SYSUAF record (and, if specified, the corresponding identifier) while retaining 
the characteristics of the old record. Retention of these characteristics can be 
particularly helpful when a user’s name changes. 


Note that because password verification includes the user name as well as the 
password, an attempted login will fail when the user whose name has been 
changed attempts to log in with an old password. (Only null passwords can 

be effectively transferred from one user record to another by the RENAME 
command.) Make it a practice to include a new password when you use 

the RENAME command, and notify the user of the change. If you omit the 
/PASSWORD qualifier, you receive a warning message reminding you that the old 
password must be changed. 


The user’s network authorization records are automatically changed to the new 
name. 


1. UAF> RENAME HAWKES KRAMERDOVE/PASSWORD=MARANNKRA 
$UAF-I-PRACREN, proxies to HAWKES renamed 
SUAF-I-RENMSG, user record renamed 
SUAF~I-RDBMDFYMSG, identifier HAWKES modified 


The command in this example changes the name of the account Hawkes to 
Kramerdove, modifies the user name identifier for the account, and renames 
all proxies to the account. 


AUTHORIZE 
RENAME 


2. UAF> RENAME HAWKES KRAMERDOVE 
SUAF-I-PRACREN, proxies to HAWKES renamed 
SUAF-I-RENMSG, user record renamed 
SUAF-W-DEFPWD, Warning: copied or renamed records must receive 
new password 
SUAF-I-RDBMDFYMSG, identifier HAWKES modified 


This example shows the warning message that the system displays if you fail 
to specify a new password with the RENAME command. 


RENAMEADENTIFIER 


Format 


Parameters 


Qualifiers 


Description 


Renames an identifier in the rights database. 


RENAME/IDENTIFIER  current-id-name new-id-name 


current-id-name 
Specifies the name of an identifier to be renamed. 


new-id-name 
Specifies the new name for the identifier. 


None. 


The RENAME/IDENTIFIER command is functionally equivalent to the following 
AUTHORIZE command: 


MODIFY/IDENTIFIER/NAME=new-id-name current-id-name 


Example 

UAF> RENAME/IDENTIFIER QISALES Q2SALES 

SUAF-I-RDBMDFYMSG, identifier QISALES modified 

The command in this example renames the identifier QISALES to Q2SALES. 
REVOKE/IDENTIFIER 

Takes an identifier away from a user. 
Format 


REVOKE/IDENTIFIER id-name user-spec 
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REVOKE/IDENTIFIER 


Parameters 


Description 


Example 


SHOW 


Format 


Parameter 


Qualifiers 
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id-name 

Specifies the identifier name. The identifier name is a string of 1 to 31 
alphanumeric characters. The name can contain underscores and dollar signs. It 
must contain at least one nonnumeric character. 


user-spec 

Specifies the UIC identifier that uniquely identifies the user on the system. 
This type of identifier appears in alphanumeric format, not numeric format; for 
example, [GROUP1,JONES]. 


The REVOKE/IDENTIFIER command edits RIGHTSLIST.DAT, removing the 
user’s name from the list of those who hold a given identifier. The change does 
not affect the process rights list of any current processes. 


UAF> REVOKE/IDENTIFIER INVENTORY CRAMER 
SUAF-I-REVOKEMSG, identifier INVENTORY revoked from CRAMER 


The command in this example revokes the identifier INVENTORY from the user 
Cramer. Cramer loses the identifier and any resources associated with it. 


Note that because rights identifiers are stored in numeric format, it is not 
necessary to change records for users holding a renamed identifier. 


Displays reports for selected UAF records on the current SYS$OUTPUT device. 


SHOW _user-spec 


user-spec 

Specifies the user name or UIC of the requested UAF record. If you omit the 
user-spec parameter, the UAF records of all users are listed. The asterisk (*) and 
percent sign (% ) wildcard characters are permitted in the user name. 


/BRIEF 
Specifies that a brief report be displayed. In the report, the Directory field 
displays one of the following items: 


e Disuser—The account has been disabled. 
e Expired—tThe account has expired. 


e A device and directory name—The login device and directory for the account 
(for example, DOCD$:[SMITH)). 


If you omit the /BRIEF qualifier, AUTHORIZE displays a full report. 


Description 


Example 


AUTHORIZE 
SHOW 


/FULL 

Specifies that a full report be displayed, including identifiers held by the user. 
Full reports include the details of the limits, privileges, login flags, and the 
command interpreter as well as the identifiers held by the user. The password is 
not listed. 


The SHOW command produces reports on user authorization records. You can 
select the reports to be displayed, as follows: 


e To display a single-user report, specify a user name. 


e To display reports for all users in ascending sequence by user name, specify 
an asterisk (*) wildcard character. ° 


e To display reports for all users with a common UIC, specify the UIC. Users 
with the same UIC are listed in the order in which they were added to the 
SYSUAF. 


You can also use the asterisk wildcard character to specify all or part of the 
UIC, as shown in the following examples: 


Command Description 
SHOW [14,*] /BRIEF Displays a brief report for all users in group 14, 
in ascending sequence by member number. 
SHOW [*,6] /BRIEF Displays a brief report for all users with a 
member number of 6. 
SHOW [*,*] /BRIEF Displays a brief report for all users, in ascending 


sequence by UIC. 


UAF> SHOW ROBIN 


The command in this VAX system example displays a full report for the user 
ROBIN. The display corresponds to the first example in the description of the 
ADD command. Most defaults are in effect. 
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Username: ROBIN Owner: JOSEPH ROBIN 
Account: VMS UIC: [14,6] ([INV,ROBIN}) 
CLI: DCL Tables: DCLTABLES 

Default: SYSSUSER: [ROBIN] 

LGICMD: 


Login Flags: 


Primary days: Mon Tue Wed Thu Fri 


Secondary days: Sat Sun 
No access restrictions 
Expiration: (none) Pwdminimum: 6 Login Fails: 0 
Pwdlifetime: (none) Pwdchange: 15-APR-1994 14:08 
Last Login: (none) (interactive), (none) (non-interactive) 
Maxjobs: 0 Fillm: 300 Bytlm: 32768 
Maxacct jobs: 0 Shrfillm: 0 Pbytln: 0 
Maxdetach: Q BIOlnm: 40 JTquota: 4096 
Prelm: 2 DI0Olm: 40 WSdef: 256 
Prio: 4 AST1m: 40 WSquo: 512 
Queprio: Q TQE1m: 10 WSextent: 1024 
CPU: (none) Englm: 200 Pgflquo: 32768 
Authorized Privileges: 
TMPMBX NETMBX 
Default Privileges: 
TMPMBX NETMBX 
Identifier Value Attributes 
CLASS CA101 %X80010032 NORESOURCE NODYNAMIC 
CLASS PY102 $X80010049 NORESOURCE NODYNAMIC 
Note 


The quotas Pbytlm and Queprio are placeholders only. 


UAF> SHOW [360,*] /BRIEF 


The command in this example displays a brief report for every user with a group 


VIC of 360. 
Owner Username UIC Account Privs Pri Default Directory 
JOHN JAMES JAMES [360,201] USER Normal 4 DOCD$:[JAMES] 
SUSY JONES JONES [360,203] DOC Devour 4 DOCD$:[JONES] 
CLIFF BROWN BROWN [360,021] DOC All 4 disuser 
JOY CARTER CARTER [360,005] DOCSEC Group 4 expired 


UAF> SHOW WELCH 


This command displays a full report for the restricted user WELCH. This VAX- 
specific display corresponds to the second example in the description of the ADD 


command. 


AUTHORIZE 


SHOW 
Username: WELCH Owner: ROB WELCH 
Account: INV UIC: [14,51] ([{14,51]) 
CLI: DCL Tables: DCLTABLES 
Default: SYSSUSER: [WELCH] 
LGICMD: SECUREIN 


Captive Diswelcome Disnewmail Restricted 
Mon Tue Wed Thu Fri 
Sat Sun 


Login Flags: 
Primary days: 
Secondary days: 


Primary 000000000011111111112222 Secondary 000000000011111111112222 
Day Hours 012345678901234567890123 Day Hours 012345678901234567890123 
Network: ----- No access ------ ##### Full access ###### 
Batch: HHH tH tHE H-------- HeRRHEE = eee nn HH THT ET EHH ------ 
Local: Het THEE tH-------- Htttttt == eee eee eee tH tH HE EH H------ 
Dialup: ##### Full access ###### 8 8 8 42424229 -eeee No access ------ 
Remote: #########-------- HtHPEER 0 mene THREE EET T------ 
Expiration: (none) Pwdminimum: 6 Login Fails: 0 
Pwdlifetime: (none) Pwdchange: (pre-expired) 

Last Login: (none) (interactive), (none) (non-interactive) 
Maxjobs: 0 Fillm: 300 Bytim: 32768 

Maxacct jobs: 0 Shrfillm: 0 Pbytlm: 0 

Maxdetach: 0 BIOlm: 40 JTquota: 4096 

Prelm: 2 DIOI1m: 40 WSdef: 256 

Prio: 4 ASTI1m: 40 WSquo: 512 

Queprio: 4 TQElm: 10 WSextent: 1024 

CPU: (none) Enqlm: 200 Pgflquo: 32768 


Authorized Privileges: 
TMPMBX NETMBX 

Default Privileges: 
TMPMBX NETMBX 


Note that WELCH is a captive user who does not receive announcements of 
new mail or the welcome message when logging in. His login command file, 
SECUREIN.COM, is presumably a captive command file that controls all of his 
operations. (Such a command file never exits, but performs operations for its 
user and logs him out when appropriate.) The CAPTIVE flag prevents WELCH 
from escaping control of the command file by using Ctrl/Y or other means. 
Furthermore, he is restricted to logging in between the hours of 5:00 PM. and 
8:59 A.M. on weekdays and 9:00 A.M. and 5:59 P.M. on weekends. Although he is 
allowed to use dial-up lines at all times during the week, he is not allowed to log 
in over the network. On weekends he is further restricted so that he cannot dial 
in at any time or use the DCL command SET HOST between the hours of 

6:00 PM. and 8:59 A.M. 


SHOW/IDENTIFIER 


Format 


Parameter 


Displays information about an identifier, such as its name, value, attributes, and 
holders, on the current SYS$OUTPUT device. 


SHOW/IDENTIFIER  [id-name] 


id-name 

Specifies an identifier name. The identifier name is a string of 1 to 31 
alphanumeric characters. The name can contain underscores and dollar signs. It 
must contain at least one nonnumeric character. If you omit the identifier name, 
you must specify /USER or /VALUE. 


AUTHORIZE 


SHOW/IDENTIFIER 


Qualifiers 


Description 


Examples 
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/BRIEF 
Specifies a brief listing in which only the identifier name, value, and attributes 
are displayed. The default format is /BRIEF. 


/FULL 
Specifies a full listing in which the names of the identifier’s holders are displayed 
along with the identifier’s name, value, and attributes. 


/USER=user-spec 

Specifies one or more users whose identifiers are to be displayed. User-spec can 
be a user name or a UIC. You can use the asterisk wildcard to specify multiple 

UICs or all user names. UICs must be in the form [*,*], [n,*], [*,n], or [n,n]. A 
wildcard user name specification (*) displays identifiers alphabetically by user 

name; a wildcard UIC specification ([*,*]) displays them numerically by UIC. 


/VALUE=value-specifier 
Specifies the value of the identifier to be listed. The following are valid formats 
for the value-specifier: 


IDENTIFIER:n An integer value in the range of 65,536 to 
268,435,455. You can also specify the value in 
hexadecimal (precede the value with %X) or octal 
(precede the value with %0O). 


To differentiate general identifiers from UIC 
identifiers, %X80000000 is added to the value 
you specify. 

UIC:uic A UIC value in the standard UIC format. 


The SHOW/IDENTIFIER command displays identifier names, values, attributes, 
and holders in various formats depending on the qualifiers specified. Two of these 
formats are illustrated in the following examples. 


1. UAF> SHOW/IDENTIFIER/FULL INVENTORY 


The command in this example would produce output similar to the following: 


Name Value Attributes 
INVENTORY %X80010006 NORESOURCE NODYNAMIC 
Holder Attributes 
ANDERSON NORESOURCE NODYNAMIC 
BROWN NORESOURCE NODYNAMIC 
CRAMER NORESOURCE NODYNAMIC 


2. UAF> SHOW/IDENTIFIER/USER=ANDERSON 
This command displays the identifier associated with the user ANDERSON, 


as follows: 
Name Value Attributes 
ANDERSON [000300,000015] NORESOURCE NODYNAMIC 


AUTHORIZE 
SHOW/IDENTIFIER 


The identifier is shown, along with its value and attributes. Note, 
however, that this is the same result you would produce had you specified 
ANDERSON’s UIC with the following forms of the command: 


UAF> SHOW/IDENTIFIER/USER=[300,015] 
UAF> SHOW/IDENTIFIER/VALUE=UIC: [300,015] 


SHOW/PROXY 


Format 


Parameters 


Qualifiers 


Example 


Displays all authorized proxy access for the specified remote user. 


SHOW/PROXY _ node::remote-user 


node 
Specifies the name of a network node in the network proxy authorization file. The 
asterisk wildcard is permitted in the node specification. 


remote-user 
Specifies the user name or UIC of a user on a remote node. The asterisk wildcard 
is permitted in the remote-user specification. 


None. 


UAF> SHOW/PROXY SAMPLE::[200,100] 
Default proxies are flagged with an * 


SAMPLE: :[200,100] 
MARCO * PROXY2 
PROXY3 


The command in this example displays all authorized proxy access for the user on 
node SAMPLE with a UIC of [200,100]. The default proxy account can be changed 
from MARCO to PROXY2 or PROXY3 with the MODIFY/PROXY command. 


SHOW/RIGHTS 


Format 


Displays the identifiers held by the specified identifiers or, if /USER is specified, 
all identifiers held by the specified users. 


SHOW/RIGHTS _[id-name] 
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AUTHORIZE 


SHOW/RIGHTS 


Parameter 


Qualifier 


Description 


Example 
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id-name 
Specifies the name of the identifier associated with the user. If you omit the 
identifier name, you must specify the /USER qualifier. 


/USER=user-spec 

Specifies one or more users whose identifiers are to be listed. User-spec can be a 
user name or a UIC. You can use the asterisk wildcard to specify multiple UICs 
or all user names. UICs must be in the form [*,*], [n,*], [*,n], or [n,n]. A wildcard 
user name specification (*) or wildcard UIC specification ({*,*]) displays all 
identifiers held by users. The wildcard user name specification displays holders’ 
user names alphabetically; the wildcard UIC specification displays them in the 
numerical order of their UICs. 


Output displayed from the SHOW/RIGHTS command is identical to that written 
to RIGHTSLIST:.LIS when you use the LIST/RIGHTS command. 


UAF> SHOW/RIGHTS ANDERSON 
This command displays all identifiers held by the user ANDERSON. For example: 


Name Value Attributes 
INVENTORY %X80010006 NORESOURCE NODYNAMIC 
PAYROLL %X80010022 NORESOURCE NODYNAMIC 


Note that the following formats of the command produce the same result: 
SHOW/RIGHTS/USER=ANDERSON 
SHOW/RIGHTS/USER=[300,015] 
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AUTOGEN Command Procedure 


AUTOGEN Description 


The AUTOGEN command procedure (SYS$UPDATE:AUTOGEN.COM) sets 
appropriate values for system parameters and sizes for system page, swap, and 
dump files. AUTOGEN runs automatically when you install or upgrade the 
operating system. In addition, you can use AUTOGEN whenever you want to 
reset system parameter values, system file sizes, or both. The new values and file 
sizes take effect the next time the system is booted. For a list and description of 
all system parameters, see the OpenVMS System Management Utilities Reference 
Manual: M-Z. 


AUTOGEN executes in phases with each phase performing a separate task. You 
control which tasks AUTOGEN performs by specifying a start phase and an end 
phase when you invoke AUTOGEN. For more information on the AUTOGEN 
phases, see Section 6.3. 


You can add commands to the file SYS$SYSTEM:MODPARAMS.DAT to control 
the system parameter values and file sizes that AUTOGEN sets. AUTOGEN 
uses the information in this file to determine final values for system parameters 
or page, swap or dump file sizes. For more information, see the chapter about 
managing system parameters in the OpenVMS System Manager’s Manual. 


AUTOGEN can improve system performance by using dynamic information, 
called feedback, gathered from the running system. You control how AUTOGEN 
uses feedback by specifying an execution mode when you invoke AUTOGEN. To 
direct AUTOGEN to use feedback to make its calculations, you run AUTOGEN in 
feedback mode. After a period of time, you might want to execute AUTOGEN 
in feedback mode to further refine system parameter settings. For more 
information about AUTOGEN feedback, see Section 6.2. 


6.1 When to Run AUTOGEN 
Digital recommends that you run AUTOGEN in the following circumstances: 


e During a new installation or upgrade. 
¢ Whenever your work load changes significantly. 


e When you add an optional (layered) software product. Certain layered 
products might require you to execute AUTOGEN to adjust parameter values 
and page and swap file sizes. (For information on using AUTOGEN to modify 
page and swap files, see the chapter on managing page, swap, and dump 
files in the OpenVMS System Manager’s Manual.) See the specific product 
documentation for installation requirements. 


¢ When you install images with the /SHARED attribute. The GBLSECTIONS 
and GBLPAGES parameters might need to be increased to accommodate 
additional use of global pages and global sections. 


e During normal operation, as part of a batch-oriented command procedure that 
runs AUTOGEN on a regular basis and automatically sends a report to an 
appropriate MAIL account. The recommended procedure is described in the 
chapter on managing system parameters in the OpenVMS System Manager’s 
Manual. 


After a new operating system installation or upgrade, examine the results of 
calculations that AUTOGEN made to determine whether AUTOGEN has set 
system parameter values that are appropriate for your workload requirements. 


AUTOGEN Description 


Table 6-1 lists the system parameters affected by AUTOGEN calculations. In 
addition to these system parameters, AUTOGEN calculations also affect the size 
of page, swap and dump files. Table 6—2 lists the system parameters affected by 


AUTOGEN feedback. 


Table 6-1 System Parameters Affected by AUTOGEN Calculations 


ACP_DINDXCACHE 
ACP_MAPCACHE 
ACP_SYSACC 
DUMPSTYLE 
FREELIM 
£GH_RSRVPGCNT 
LNMSHASHTBL 
tLOCKIDTBL_MAX 
<tMPW_THRESH 
MPW_WAITLIMIT 
NISCS_PORT_SERV 
PAGEDYN 
tPHYSICALPAGES 
PQL_DWSEXTENT 
PQL_MWSEXTENT 
SCSCONNCNT 
tSHADOW_MAX_COPY 
SYSMWCNT 
VOTES 

WSMAX 


+VAX specific 


ACP_DIRCACHE 
ACP_QUOCACHE 
BALSETCNT 
EXPECTED_VOTES 
GBLPAGES 
GROWLIM 
LOCKDIRWT 
MAXPROCESSCNT 
MPW_LOLIMIT 
MSCP_BUFFER 
NPAGEDYN 
PASTDGBUF 
PIXSCAN 
PQL_DWSQUOTA 
PQL_MWSQUOTA 
SCSBUFFCNT 
+SPTREQ 
+VAXCLUSTER 
WSDEC 
ZERO_LIST_HI 


ACP_HDRCACHE 
ACP_SWAPFLGS 
BORROWLIM 
FREEGOAL 
GBLSECTIONS 
tITB_ENTRIES 
LOCKIDTBL 
MPW_HILIMIT 
MPW_LOWAITLIMIT 
MSCP_LOAD 
NPAGEVIR 
PFCDEFAULT 
PQL_DWSDEFAULT 
PQL_MWSDEFAULT 
RESHASHTBL 
tSCSRESPCNT 
t+SWPOUTPGCNT 
VIRTUALPAGECNT 
+WSINC 


£AXP specific 


6.2 Feedback 


AUTOGEN feedback minimizes the need for you to modify parameter values or 
system file sizes. Feedback allows AUTOGEN to automatically size the operating 
system based on your actual work load. Sizing is the process of matching 

the allocation of system resources (memory and disk space) with the workload 
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requirements of your site. 


Feedback is information about how various resources are used by the system’s 
work load. This information is continuously collected by the operating system 
executive. Because the system collects feedback when exception events occur, 


feedback collection does not affect system performance. 


You control how AUTOGEN uses feedback by specifying an execution mode 
when you invoke AUTOGEN. When run in feedback mode, AUTOGEN analyzes 
this information and adjusts any related parameter values. For information on 


controlling AUTOGEN’s use of feedback, see Section 6.4. 


AUTOGEN Description 


AUTOGEN collects feedback during the SAVPARAMS phase by executing the 
image SYS$SYSTEM:AGEN$FEEDBACK.EXE. AUTOGEN writes feedback 
information to the file SYS$SYSTEM:AGEN$FEEDBACK.DAT. This file is then 
read during the GETDATA phase. For more information on AUTOGEN phases, 
see Section 6.3. 


Table 6-2 lists the system parameters affected by AUTOGEN feedback. In 
addition to these system parameters, feedback also affects the size of page and 
swap files. 


Table 6-2 System Parameters Affected by AUTOGEN Feedback 


ACP_DINDXCACHE ACP_DIRCACHE ACP_HDRCACHE 
ACP_MAPCACHE GBLPAGES GBLSECTIONS 
LOCKIDTBL fLOCKIDTBL_MAX LNMSHASHTBL 
£GH_RSRVPGCNT tITB_ENTRIES MAXPROCESSCNT 
MSCP_BUFFER NPAGEDYN PAGEDYN 
RESHASHTBL SCSBUFFCNT SCSCONNCNT 
tSCSRESPCNT 
{VAX specific 
tAXP specific 

6.3 Phases 


AUTOGEN executes in phases. You control which tasks AUTOGEN performs 
by specifying a start phase and an end phase when you invoke AUTOGEN. 
Table 6-3 lists the phases AUTOGEN can execute in order. 


Table 6-3 AUTOGEN Phases 


Phase Description 

SAVPARAMS Saves dynamic feedback from the running system. 

GETDATA Collects all data to be used in AUTOGEN calculations. 

GENPARAMS Generates new system parameters; creates the installed image 
list. 

TESTFILES Displays the system page, swap, and dump file sizes calculated 
by AUTOGEN (cannot be used as a start phase). 

GENFILES Generates new system page, swap, and dump files if 
appropriate (cannot be used as a start phase). 

SETPARAMS Runs SYSMAN to set the new system parameters in the 


default parameter file, saves the original parameters, and 
generates a new parameter file, AUTOGEN.PAR. 


SHUTDOWN Prepares the system to await a manual reboot. 
REBOOT Automatically shuts down and reboots the system. 
HELP Displays help information to the screen. 


The following sections describe each phase in detail. 


AUTOGEN Description 


6.3.1 SAVPARAMS 


The SAVPARAMS phase records feedback in the file AGEN$FEEDBACK.DAT, 
which can be used in subsequent AUTOGEN phases. If you specify 
NOFEEDBACK as the execution-mode parameter, the information collected 

is not used. 


The SAVPARAMS phase is valid as a start phase and end-phase. SAVPARAMS 
requires the SYSPRV and CMKRNL privileges. 


Note 


You can specify the SAVE_FEEDBACK option during an interactive 
orderly shutdown with SYS$SYSTEM:SHUTDOWN.COM. Entering this 
option in response to the prompt “Shutdown options:” records feedback 

_ collected since the system was last booted. Using the SAVE_FEEDBACK 
option creates a new version of SYS$SYSTEM:AGEN$FEEDBACK.DAT. 
Run AUTOGEN from the GETDATA phase after the system reboots to 
use this new version of the feedback. 


6.3.2 GETDATA 


The GETDATA phase collects the following information required for AUTOGEN 
calculations and places it in the file PARAMS.DAT: 


¢ Hardware configuration data 

¢ Digital-supplied data from VMSPARAMS.DAT 

e Feedback from AGEN$FEEDBACK.DAT (if run in feedback mode) 
¢ User-supplied data from MODPARAMS.DAT 


The GETDATA phase also attempts to configure devices on the system, by 
executing the following: 


e The command procedure SYS$SMANAGER:SYCONFIG.COM. (For more 
information on this procedure, see the chapter on managing devices in the 
OpenVMS System Manager’s Manual.) 


¢ The SYSGEN command AUTOCONFIGURE ALL (unless the symbol 
STARTUP$AUTOCONFIGURE_ALL is set to 0 in SYCONFIG.COM). 


The GETDATA phase is valid as a start phase and an end phase. GETDATA 
requires the SYSPRV and CMKRNL privileges. 


6.3.3 GENPARAMS 


6-6 


In the GENPARAMS phase, AUTOGEN calculates the parameter values based 
on data stored in PARAMS.DAT and produces SETPARAMS.DAT as output. 
AUTOGEN checks to see if feedback is included, and if so, uses it in the 
calculations unless the NOFEEDBACK execution mode was specified when 
AUTOGEN was invoked. Also during this phase, AUTOGEN generates the 
known image file list (VMSIMAGES.DAT). 


The GENPARAMS phase is valid as a start phase and an end phase. 
GENPARAMS requires the SYSPRV and OPER privileges. 


AUTOGEN Description 


6.3.4 TESTFILES 


The TESTFILES phase displays system page, swap, and dump file sizes 
calculated by AUTOGEN. (This phase does not change the file sizes.) 


File sizes for all currently installed primary and secondary page and swap 
files are displayed. The information is directed to SYS$OUTPUT and the 
AGEN$PARAMS.REPORT file by default. 


Specify the TESTFILES phase to display AUTOGEN’s file size calculations; 

to generate new sized files, specify the GENFILES phase. You cannot specify 
both of these phases when invoking AUTOGEN. Digital recommends you use 
TESTFILES to display the file size changes before actually generating new sized 
files on your system. 


The TESTFILES phase is valid only as an end phase. TESTFILES requires the 
SYSPRV privilege. | 


6.3.5 GENFILES 


The GENFILES phase generates the new page, swap, and dump files on the 
system. This phase chnages the file sizes based on AUTOGEN’s calculations. 


The GENFILES phase does not modify a file if the calculated size change is 
within ten percent of the existing file size. The following files are affected: 
PAGEFILE.SYS, SWAPFILE.SYS, SYSDUMP.DMP, and all other currently 
installed page and swap files. For more information, see the chapter on managing 
page, swap and dump files in the OpenVMS System Manager’s Manual. 


GENFILES is valid only as an end phase. GENFILES requires the SYSPRV 
privilege. 


6.3.6 SETPARAMS 


The SETPARAMS phase uses as its input the SETPARAMS.DAT file created 
during the GENPARAMS phase. In this phase, AUTOGEN runs SYSMAN to 
update the system parameter values in the default parameter file. 


> On VAX systems, the default parameter file is SYS$SYSTEM:VAXVMSSYS.PAR. 
AUTOGEN saves the current system parameters in the file 
SYS$SYSTEM:VAXVMSSYS.OLD before updating these parameters in 
SYS$SYSTEM:VAXVMSSYS.PAR. The new values are also saved in 
SYS$SYSTEM:AUTOGEN.PAR. ¢ 


AXP On AXP systems, SYS$SYSTEM:ALPHAVMSSYS.PAR is the default 
parameter file. AUTOGEN saves the current system parameters in the 
file SYS$SYSTEM:ALPHAVMSSYS.OLD before updating these parameters 
in SYS$SYSTEM:ALPHAVMSSYS.PAR. The new values are also saved in 
SYS$SYSTEM:AUTOGEN.PAR. ¢ 


The SETPARAMS phase is valid as a start phase and an end phase. 
SETPARAMS requires the SYSPRV and OPER privileges. 


6.3.7 SHUTDOWN 


SHUTDOWN shuts down the system and awaits a manual reboot. To use the new 
system parameter values generated in the SETPARAMS phase, specify either 
SHUTDOWN or REBOOT as the end phase. You can define the logical name 
AGEN$SHUTDOWN_TIME (using the DCL command DEFINE) to specify the 
number of minutes before shutdown occurs. 


SHUTDOWN requires the SETPRV privilege. 
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AUTOGEN Description 


6.3.8 REBOOT 


6.3.9 HELP 


REBOOT automatically shuts down and reboots the system thus installing the 
new parameter values. To install the new system parameter values generated 
in the SETPARAMS phase, specify either SHUTDOWN or REBOOT as the end 
phase. You can define the logical name AGEN$SHUTDOWN_TIME (using the 
DCL command DEFINE) to specify the number of minutes before shutdown 
occurs. 


REBOOT requires the SETPRV privilege. 


HELP displays help information about AUTOGEN to the screen. The HELP 
phase is only valid as the start phase command line parameter. When you specify 
HELP for the start phase, the end phase and execution mode parameters are 
ignored. 


6.4 Execution Modes 
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You specify an execution mode when you invoke AUTOGEN to control how 
AUTOGEN uses feedback. Table 6-4 lists the execution-mode options. 


Table 6-4 AUTOGEN Execution Modes 


Option Description 

FEEDBACK Specifies that AUTOGEN run in feedback mode, using dynamic 
feedback collected during the SAVPARAMS phase to make its 
calculations. 

NOFEEDBACK Specifies that AUTOGEN not use feedback in the calculations. 


The feedback from the SAVPARAMS phase is ignored. Use 
NOFEEDBACK mode for the initial system installation or 
upgrade. NOFEEDBACK supersedes the execution-mode option 
INITIAL, which was used in a previous version of the operating 
system. 


CHECK_FEEDBACK Specifies that AUTOGEN use feedback in its calculations as long 
as the feedback is valid. If feedback is suspect, AUTOGEN does 
not use feedback in the calculations, but continues through the 
specified end phase. 


Blank If you do not specify an execution mode, AUTOGEN uses 
feedback in the calculations by default. However, if AUTOGEN 
determines that the feedback might be suspect, it performs 
the calculations, issues the feedback report, and stops before 
modifying any parameters or system files, even if you specified 
an end phase of GENFILES, SETPARAMS, SHUTDOWN or 
REBOOT. 


AUTOGEN Description 


6.5 Files Used by AUTOGEN 
Table 6—5 lists the files AUTOGEN uses during each phase. 


Table 6-5 Files Used by AUTOGEN 


AUTOGEN Phase Input Files! Output Files’ 
SAVPARAMS None AGEN$FEEDBACK.DAT 
GETDATA MODPARAMS.DAT PARAMS.DAT 
VMSPARAMS.DAT 
AGEN$FEEDBACK.DAT 
GENPARAMS PARAMS.DAT SETPARAMS.DAT 
VMSIMAGES.DAT 
AGEN$PARAMS.REPORT 
TESTFILES PARAMS.DAT SYS$OUTPUT 
GENFILES PARAMS.DAT PAGEFILE.SYS 
SWAPFILE.SYS 


(and secondary page 

and swap files) 
SYSDUMP.DMP 
AGEN$PARAMS.REPORT 


SETPARAMS SETPARAMS.DAT TVAXVMSSYS.PAR 
tALPHAVMSSYS.PAR 
AUTOGEN.PAR 
TVAXVMSSYS.OLD 
tALPHAVMSSYS.OLD 


SHUTDOWN None None 
REBOOT None None 


1A]l files except VMSIMAGES.DAT, which contains the installed image list, reside in the 
SYS$SYSTEM directory. VMSIMAGES.DAT resides in the SYS$MANAGER directory. 


fVAX specific 
£AXP specific 
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AUTOGEN Usage Summary 


Format 
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The AUTOGEN command procedure runs automatically when your system is 
installed or upgraded to set appropriate values for system parameters and sizes 
for system page, swap, and dump files. 


Execute AUTOGEN to reset system parameter values and system file sizes. The 
new values and file sizes take effect the next time the system is booted. 


To invoke AUTOGEN enter a command in the following format at the DCL 
command prompt: 


@SYS$UPDATE:AUTOGEN [start-phase] [end-phase] [execution-mode] 


Parameters 


start-phase 
Specify the phase where AUTOGEN is to begin executing. Table 6-3 lists the 
options for the end-phase parameter. 


The phase specified for start-phase must either precede or be identical to the 
phase specified for end-phase, according to the sequence shown in Table 6-3. If 
you do not supply an option for the start-phase parameter, enter a null argument 
(that is, "" ). If you do not specify a start phase, GENPARAMS is the default. 


end-phase 

Specify the phase where AUTOGEN is to complete executing. Table 6-3 lists the 
options for the end-phase parameter. If you do not specify an end phase, the end 
phase has the same value as the start phase by default. 


execution-mode 
Specify one of the following execution-mode options to control how AUTOGEN 
uses feedback: : 


e FEEDBACK 

¢ NOFEEDBACK 

¢ CHECK_FEEDBACK 
e Blank 


Table 6—4 describes each execution-mode option. 
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Backup Utility 





BACKUP Description 


The Backup utility (BACKUP) helps you prevent data loss or corruption by 
creating copies of your files, directories, and disks. In case of a problem—for 
example, a disk drive failure—you can restore the backup copy and continue your 
work with minimal disruption. 


When you save files with BACKUP, it writes the files to a special file called a 
save set. Save sets are written in a format that only BACKUP can interpret. 
(A save set stored on a Files—11 disk is a standard VMS file, however, and can 
be copied, renamed, deleted, or backed up. A save set stored on magnetic tape 
should only be processed with the BACKUP command; do not use the DCL 
command COPY to copy a magnetic tape save set to disk.) 


Use BACKUP to perform the following tasks: 

e Save disk files to a BACKUP save set. 

e¢ Restore files to disk from a BACKUP save set. 
¢ Copy disk files to disk files. 


¢ Compare disk files created by BACKUP or files in a BACKUP save set with 
disk files . 


e List information about the files in a BACKUP save set. 


e Create and list journal files that record the results of BACKUP save 
operations. 


For specific information about performing these tasks, see the OpenVMS System 
Manager’s Manual. 


Note 


Some layered products have their own special backup procedures. For 
more information, see the layered product documentation. 


Using BACKUP also eliminates disk fragmentation. Fragmentation can occur 
as you create and extend files on a disk. If the file system cannot store files in 
contiguous blocks, it stores them in noncontiguous pieces. Eventually, the disk 
can become severely fragmented and system performance suffers. To eliminate 
fragmentation, perform an image backup of the disk and restore the backup 
copy. When you restore the image backup, BACKUP places the files on the disk 
contiguously. 


Besides backing up your own files, directories, and disks, remember to back up 
your VMS system disk. Depending on the policy at your site, individuals may be 
responsible for backing up their system disks, or an operator or system manager 
may perform the backup (as would likely be the case in a large, clustered 
computer system). To back up a system disk, use a special version of the VMS 
Backup utility called standalone BACKUP. Standalone BACKUP is described in 
the OpenVMS System Manager’s Manual. 
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BACKUP Description 
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There are several types of backup operations: 


An image backup (also called a full backup) saves a copy of all the files on a 
disk (or volume) to a save set. The first backup that you do on a disk must be 
an image backup; you cannot perform an incremental backup first. 


An image restore initializes the output disk and restores an entire volume. 


An image copy operation initializes the output disk and copies an entire 
volume; the image backup is a logical duplicate of the contents of the disk. 


An image compare operation compares the contents of entire volumes. 


Note 


Because an image copy or backup operation processes all files on the input 
volume, you cannot specify file-selection qualifiers for these operations. 
You can, however, restore files and directories selectively from an image 
save set. 


If the output volume of an image operation is a disk, BACKUP stores all 
files on the output volume contiguously, eliminating disk fragmentation and 
creating contiguous free blocks of disk space. 


An incremental backup saves only those files that have been created 

or modified since the most recent backup that was performed using the 
/RECORD qualifier. (The /RECORD qualifier records the date and time that 
the files are backed up.) 


An incremental restore operation restores an incremental save set. Specify 
the command qualifier INCREMENTAL in an incremental restore operation. 


A file operation processes individual files or directories. 


A selective operation process files or volumes selectively, according to criteria 
such as version number, file type, UIC, date and time of creation, expiration 
date, or modification date. 


Perform selective save operations by using wildcard characters and input 
file-selection qualifiers (for example, /BACKUP, /BEFORE, /BY_OWNER © 
((OWNER_UIC), /CREATED, /EXCLUDE, /EXPIRED, /MODIFIED, and 
/SINCE). 


A physical operation copies, saves, restores, or compares an entire volume in 
terms of logical blocks, ignoring any file structure. 


The following sections describe the BACKUP command line format. 


7.1 BACKUP Command Line Format 


To perform BACKUP operations, enter the DCL command BACKUP in the 
following format: 


BACKUP input-specifier output-specifier 


BACKUP evaluates the input and output specifiers to determine which type of 
operation to perform. BACKUP also uses the input specifier to locate the input 
and directs output to the output specifier. 


BACKUP Description 


7.2 BACKUP Input and Output Specifiers 


BACKUP can process several different types of input and output. Depending on 

the type of operation being executed, input and output specifiers can be standard 
VMS file specifications, BACKUP save-set specifications, or device specifications. 

Device specifications can refer to disk or magnetic tape volumes. 


You can specify any valid VMS file specification as BACKUP input or output 
specifiers; however, BACKUP does not allow node names in BACKUP file 
specifications. You can use wildcard characters, and you can list multiple file 
specifications as input to a single BACKUP operation. 


A BACKUP save-set specification is the file specification of a BACKUP save set. 
When you use BACKUP to save files or volumes, it writes your files to a save 
set. You can specify the save set as input to other BACKUP operations. When 
specifying a save set, follow the rules for specifying a VMS file. The OpenVMS 
User’s Manual describes valid specifications for disk files; the OpenVMS System 
Manager’s Manual explains the rules for specifying magnetic tape files. There is 
no default file type for a save-set specification, although it is customary to use 
BCK or SAV. 


The save-set name can be any valid VMS file name and type. However, when 
you create a save set on magnetic tape, the save-set name has the following 
restrictions: 


e The entire save-set name cannot exceed 17 characters, including the period 
delimiter. 


¢ You cannot specify a version number. 
¢ You cannot specify a directory name. 


Device specifications used as BACKUP input or output specifiers follow the 
conventions for specifying devices outlined in the OpenVMS User’s Manual. 


By default, BACKUP treats an input or output specifier referring to a Files—11 
disk as a file specification. Therefore, to identify a save set on a Files—11 volume, 
you must include the /SAVE_SET qualifier with the specifier (see /SAVE_SET). 
BACKUP treats input and output specifiers referring to magnetic tape as save 
sets. 


Note 


You cannot specify a save set for both the input and output specifier of 
a BACKUP command. For this reason, you cannot perform a BACKUP 
operation from one magnetic tape to another. 


Table 7-1 shows input and output specifiers for each type of BACKUP operation. 


Table 7-1 BACKUP Input and Output by Operation Type 


Operation Format 
Save BACKUP file-spec save-set-spec 
Save (image) BACKUP/IMAGE device-spec save-set-spec 


(continued on next page) 
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BACKUP Description 


Table 7-1 (Cont.) BACKUP Input and Output by Operation Type 


Operation Format 


Save (physical to disk) BACKUP/PHYSICAL device-spec device-spec 
Save (physical to tape) BACKUP/PHYSICAL device-spec save-set-spec 


Restore BACKUP save-set-spec file-spec 

Restore (image) BACKUP/IMAGE save-set-spec device-spec 

Restore (physical from BACKUP/PHYSICAL save-set-spec device-spec 

disk) 

Restore (physical from BACKUP/PHYSICAL save-set-spec device-spec 

tape) 

Copy BACKUP file-spec file-spec 

Copy (image) BACKUP/IMAGE device-spec device-spec 

Compare BACKUP/COMPARE file-spec file-spec 
BACKUP/COMPARE save-set-spec file-spec 

Compare (image) BACKUP/COMPARE/IMAGE save-set-spec device-spec 
BACKUP/COMPARE/IMAGE device-spec device-spec 

Compare (physical) BACKUP/COMPARE/PHYSICAL device-spec device-spec 
BACKUP/COMPARE/PHYSICAL save-set-spec device-spec 

List! '  _BACKUP/LIST[=file-spec] save-set-spec 
BACKUP/LISTI[=file-spec] device-spec 

Create Journal BACKUP/JOURNALI=file-spec] file-spec save-set-spec 

List Journal BACKUP/JOURNAL=file-spec]/LIST[=file-spec] 


1Can also be used in conjunction with any other operation listed here. 


7.2.1 Input and Output Specifier Element Lists 


An element list is a list of arguments specified with a command or qualifier. 
The arguments, or elements, in the list are separated by commas. Element 
lists relating to input or output specifiers are allowed only in the following 
circumstances: 
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If an input specifier refers to a Files—11 disk, you can construct lists from 
standard VMS file specifications, as follows: 


$ BACKUP 
_From: DUAQ:[DATA]A.DAT,B.DAT, [PROGRAMS] TEST.EXE 
_To: MSA0Q:TEST.SAV/LABEL=DLY101 


If an input specifier or an output specifier refers to a BACKUP save set on 
magnetic tape or sequential disk, you can specify more than one device name 
to be used in the operation. This allows you to process multivolume save sets 
efficiently by specifying the order in which devices will be used. The first 
volume is processed until it is full. The second (or subsequent) volume is 
processed while the media in the first (or previous) volume is being changed. 
However, the save-set name must appear with the first element in the list 
and must not appear in subsequent elements in the list. 


In the following example, BACKUP first saves data to a tape in drive MSAO, 
then to a tape in drive MSA1. When the tape in drive MSA1 is full, BACKUP 
saves data to a fresh tape in MSAO. 


BACKUP Description 


$ BACKUP 
_From: DUAQ:[DATA]*.*,DUAQ: [PROGRAMS ]*.* 
“To: MSAQ:TEST.SAV,MSA1:/LABEL=WKLY01 


e¢ If you are performing an image operation on a volume set, you can specify 
element lists in the input and output specifiers. In the following example, 
BACKUP first restores the save set TEST.SAV from the tape in drive MSAO, 
and then continues to restore the save set from the tape in drive MSA1. 
BACKUP first restores this save set to DUAO. When DUAO is full, BACKUP 
continues the restore operation to DUAI. 


$ BACKUP/ IMAGE 
_From: MSAQ:TEST.SAV,MSA1: 
_To: DUAQ:[DATA...],DUA1: 


7.2.2 BACKUP Qualifiers 


You can also affect BACKUP operations by specifiying qualifiers. BACKUP has 
five types of qualifiers: 


¢ Command qualifiers allow you to modify the default action of a BACKUP 
command. You can place command qualifiers anywhere in the command line. 
Command qualifiers act upon every file in the input or output specifier. 


¢ Input file-selection qualifiers select files from the input specifier. Place 
them immediately after the input specifier. 


¢ Input save-set qualifiers affect the way BACKUP handles an input save set 
during a restore operation. Place them immediately after the input specifier. 


¢ Output file qualifiers change the way output files are restored. Place them 
immediately after the output specifier. 


¢ Output save-set qualifiers affect the way BACKUP processes an output 
save set during a save operation. Place them immediately after the output 
specifier. 


Note 


You cannot use input and output qualifiers in image operations. 


It is important to understand the differences between the types of qualifiers. The 
position of qualifiers in the BACKUP command line affects the results of the 
command. Although command qualifiers can be placed anywhere in the command 
line, input- and output-specifier qualifiers are position-dependent. That is, input- 
specifier qualifiers must be placed immediately after the input specifier, and 
output-specifier qualifiers must be placed immediately after the output specifier. 


Additionally, several BACKUP qualifiers are both input-specifier qualifers and 
output-specifier qualfiers. To achieve the results you want from a BACKUP 
command, ensure that you place position-dependent qualifiers correctly. For 
example, use the /SAVE_SET qualifier as an output save-set qualifier in a 
BACKUP save operation and as an input save-set qualifier in a BACKUP restore 
operation. 


Appendix H contains more information about valid combinations of BACKUP 
qualifiers. 


7-7 


BACKUP Description 


7.2.3 Using Wildcard Characters with BACKUP 


BACKUP allows you to use wildcard characters in file specifications to represent 
directories, file names, file types, and version numbers. Omitted file names, file 
types, or version numbers are assumed to be the asterisk wildcard character. For 
instance, if you omit the version number, BACKUP processes all versions. (For 
introductory information on wildcard characters, refer to the OpenVMS User’s 
Manual.) 


You can use any valid DCL wildcard character with input specifiers that are 
Files—11 media or with the /SELECT and /EXCLUDE qualifiers. Note, however, 
that the symbols denoting the latest versions of files (;) and relative versions of 
files (;-n) are processed as the asterisk wildcard character (;*) when they are used 
with the /EXCLUDE and /SELECT qualifiers. 


You cannot use wildcard characters in BACKUP save-set specifications unless the 
save sets are input specifiers on tape. 


Using Wildcard Characters to Represent Directories 


Table 7-2 lists the types of directory wildcards allowed for output specifiers that 
are Files—11 media. 


Table 7-2 Wildcards for Files—11 Output Specifiers 


Directory Wildcard Result 

omitted If a directory name is omitted, BACKUP restores file to the 
current default directory []. 

cect BACKUP restores files to the directory from which they 
were saved. 

[directory] BACKUP restores files to the named directory. 

[directory ... ] The wildcard characters used in the specification of the 


input files determine the directory to which BACKUP 
restores the files. 


: Note 


If you specify directory wildcard characters incorrectly and your 
directories contain many levels of subdirectories, you risk losing the 
lower level subdirectories in BACKUP operations because VMS directory 
trees can have only eight levels. 


The following example uses the directory wildcard format [directory ... ] for both 
the input and the output specifiers: 


$ BACKUP [OSCAR...] [JOE.RECEIVED...] 


In this example, BACKUP creates a directory named [JOE.RECEIVED] (if it does 
not already exist) as well as subdirectories that correspond to the subdirectories 
of [OSCAR]. BACKUP copies all files from the directory [OSCAR] and its 
subdirectories to [JOE.RECEIVED] and its subdirectories. If [OSCAR] has 

eight levels of directories, however, BACKUP is unable to create a corresponding 
ninth-level subdirectory to [JOE.RECEIVED)]; the eighth-level subdirectory to 
[OSCAR] is not copied. 


BACKUP Description 


If you use the asterisk wildcard character (*) to represent subdirectories in 

the input specifier of a copy operation, BACKUP creates subdirectories to the 
directory specified in the output specifier that correspond to the subdirectories 
in the input specifier. BACKUP then copies all files from the lowest level 
subdirectory in the input specifier to the lowest level subdirectory in the output 
specifier. In the following example, the asterisk represents subdirectories named 
MONDAY and TUESDAY: 


$ BACKUP [SAM.WORK.*.WEDNESDAY] [JAMES...] 


In this example, BACKUP creates a subdirectory named 
[JAMES.MONDAY.TUESDAY.WEDNESDAY]. In doing so, BACKUP 
copies the file MONDAY.DIR to [JAMES], copies the file TUESDAY.DIR 
to [JAMES.MONDAY], and copies the file WEDNESDAY.DIR 

to [JAMES.MONDAY.TUESDAY]. Then BACKUP copies all 

files from [SAM.WORK.MONDAY.TUESDAY.WEDNESDAY] to 
[JAMES.MONDAY.TUESDAY.WEDNESDAY]. 


In a restore operation, the input specifier defaults to [* ... ] if the input 
save-set qualifier /SELECT is not used; this is important if you use the form 
[directory ...] in the output specifier. The function of the wildcard [* ... ] is 
to carry over the entire directory name from the first level on and to place it 
before the ellipsis in the output specifier. Thus, if the save set in the following 
example contains the directory tree [SAVE ... ], the restored directory tree will 
be [WORK.SAVE ... ]: 


$ BACKUP MTA0:SAVE.BCK [WORK...] 


Note that the result will be the same, even if your output specifier has the same 
name as the directory in the input specifier, as shown in the following example: 


$ BACKUP MTA0:SAVE.BCK [SAVE...] 


The preceding command restores the directory tree [SAVE ... ] to a directory 
tree named [SAVE.SAVE ... ]. 


The following command restores the directory tree [SAVE ... ] to a directory tree 
named [WORK ... ]: 


$ BACKUP MTA0:SAVE.BCK/SELECT=[SAVE...] [WORK...] 


There are two ways to retain the original directory name when you restore files. 
You must either use the form [* ... ] for the output specifier, or you must specify 
the input save-set qualifier /SELECT. The following example uses the form 

[* ... ] in the output specifier to restore the directory tree [SAVE ... ] in save 
set SAVE.BCK to the directory tree [SAVE ... ]: 


$ BACKUP MTA0:SAVE.BCK [*...] 


The input save-set qualifier /SELECT causes only the ellipsis portion of the 
selected file specification to be carried over to the directory tree named in the 
output specifier [directory ...]. The following command restores [SAVE ... ] to 
[SAVE ... ]: 


$ BACKUP MTA0:SAVE.BCK/SELECT=[SAVE...] [SAVE...] 


BACKUP Usage Summary 


Format 


By duplicating files or volumes of files, the Backup utility (BACKUP) protects 
data from loss or corruption. 


BACKUP is intended for use primarily by system managers and operators to 
protect public media. However, anyone can use BACKUP to make personal 
BACKUP copies and to transport files between VMS systems. 


Standalone BACKUP is a version of the Backup utility that is bootstrapped into 

main memory instead of running under the control of the VMS operating system. 
Standalone BACKUP uses a subset of BACKUP qualifiers to perform image and 

physical BACKUP operations. 


BACKUP input-specifier output-specifier 


Parameters 

input specifier 

Specifies the input for the BACKUP operation. The input specifier can be a 
standard VMS file specification, a BACKUP save-set specification, or a device 
name. If the input specifier is a save-set specification on disk, it must include the 
input save-set qualifier /SAVE_SET. 


DECnet node names are allowed only in save-set specifications. 


Wildcards are permitted in standard VMS file specifications and in save-set 
specifications if they are on magnetic tape. 


output specifier 

Specifies the output for the BACKUP operation. The output specifier, like the 
input specifier, can be either a standard VMS file specification, a BACKUP save- 
set specification, or a device name. If the output specifier is a save set on disk, it 
must include the output save-set qualifier /SAVE_SET. 


DECnet node names are allowed only in save-set specifications. 


You can use wildcard characters if the output specifier is a Files—11 volume. You 
cannot use wildcard characters if the output specifier is a BACKUP save set or a 
volume created by a BACKUP/PHYSICAL or BACKUP/IMAGE operation. Refer 


‘to Section 7.2.3 for restrictions on the use of wildcard characters in BACKUP 


commands. 


Usage Summary 
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To invoke online BACKUP, enter an appropriate BACKUP command at the DCL 
prompt. For instructions on invoking standalone BACKUP, refer to the OpenVMS 
System Manager’s Manual. 


When you enter a BACKUP command, BACKUP evaluates the input and output 
specifier and qualifiers to determine the type of operation to perform. BACKUP 
uses the input specifier to locate the input to the utility and directs output to 
the output specifier, which can be a file or a save set on disk or a save set on 
magnetic tape. 


BACKUP Usage Summary 


After executing the command, BACKUP returns to DCL command level. If you 
want to halt the execution of a BACKUP command prematurely, press Ctrl/Y. If 
BACKUP is creating a file when you press Ctrl/Y, the file is closed immediately 
and only partially created. 


You need the user privilege TMPMBX to send messages to operator terminals 
when using BACKUP in batch mode. If you are performing a save operation to 

a volume set of sequential disks, you must have the user privilege PHY_IO or 
LOG_IO to write to a continuation volume. The use of several BACKUP qualifiers 
also requires privileges; these are noted in the appropriate qualifier descriptions. 
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BACKUP Qualifiers 


This section describes and provides examples of each BACKUP qualifier. Make 
sure that you understand how the position of BACKUP qualifiers affects 
BACKUP operations. See Section 7.1 for information on the BACKUP command 
line format. Table 7-3 summarizes the BACKUP qualifiers. 
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Table 7-3 BACKUP Qualifier Summary 


Qualifier 
/ASSIST 


/BACKUP 


/BEFORE 
/BLOCK_SIZE 


/BRIEF 


/BUFFER_COUNT 
/BY_OWNER 


/COMMENT 
/COMPARE 
/CONFIRM 


/CRC 


/CREATED 


/DELETE 


/DENSITY 
/EXACT_ORDER 


/EXCLUDE 


Description 


Allows operator or user intervention if a request to mount a 
magnetic tape fails during a BACKUP operation. 


Selects files according to the BACKUP date written in the file 
header record by the BACKUP/RECORD command. 


Selects files dated earlier than the date and time you specify. 


Specifies the output block size in bytes for data records in a 
BACKUP save set. 


Causes the /LIST qualifier to display the file specification, size 
(in blocks), and creation date for each file in the save set. 


This qualifier is obsolete and has no effect. 
As an input file-selection qualifier, /BY_OWNER causes 
BACKUP to process files owned by the specified UIC. 


As an output file qualifier, /BY_OWNER redefines the owner 
user identification code (UIC) for restored files. 


As an output save-set qualifier, /BY_OWNER specifies the 
owner user identification code (UIC) of the save set. 


Places the string that you supply into the BACKUP summary 
record of the output save set. 


Causes BACKUP to compare the contents of the first 
parameter with the contents of the second parameter. 


Displays prompts on your terminal for confirmation before 
processing each file. 


As an input save-set qualifier, /CRC checks the software cyclic 
redundancy check (CRC) encoded in the save set’s data blocks. 


As an output save-set qualifier, /CRC specifies that the CRC 
is to be computed and stored in the data blocks of the output 
save set. 


Selects files according to the value of the creation date field in 
each file header record. 


Specifies that a BACKUP save or copy operation is to delete 
the selected input files from the input volume after all files 
have been successfully processed. 


Specifies the recording density of the output magnetic tape in 
bits per inch (bits/in). 


Specifies the exact order of tape volume labels that you want 
to use in a BACKUP operation. 


Excludes files from processing that otherwise meet the 
selection criteria for a save or copy operation. 


(continued on next page) 


BACKUP Qualifiers 


Table 7-3 (Cont.) BACKUP Qualifier Summary 


Qualifier 


/EXPIRED 
/FAST 


/FULL 


/GROUP_SIZE 
IGNORE 
/IMAGE 
INCREMENTAL 
/AINITIALIZE 


/INTERCHANGE 


/JOURNAL 
/LABEL 

/LIST 

/LOG 
/MEDIA_FORMAT 
/MODIFIED 


/NEW_VERSION 


/OVERLAY 


/OWNER_UIC 


/PHYSICAL 


Description 


Selects files according to the value of the expiration date field 
in each file header record. 


Processes the input specifier using a fast file scan to reduce 
processing time. 


Displays the information produced by the /LIST command 
qualifier in a format similar to that displayed by the DCL 
command DIRECTORY/FULL. 


Defines the number of blocks BACKUP places in each 
redundancy group. 


Specifies that a BACKUP save or copy operation will override 
restrictions placed on files or will not perform tape label 
processing checks. 


Directs BACKUP to process an entire volume or volume set. 


Allows you to restore a disk volume from a series of 
incremental save sets. 


Initializes an output disk volume, making its entire previous 
contents unavailable. 


Directs BACKUP to process files in a manner suitable for data 
interchange (software distribution) by excluding information 
that would prevent other utilities or sites from reading the 
BACKUP save set. 


Specifies that a BACKUP save operation is to create, or append 
information to, a BACKUP journal file. 


Specifies the 1- to 6- character volume labels for the magnetic 
tapes to which the save set is written. 


Lists information about a BACKUP save set and about the files 
in a save set. 


Displays the file specification of each file processed during the 
operation on SYS$OUTPUT. 


Controls whether data records are automatically compacted 
and blocked together. 


Selects files according to the value of the modified date field 
(the date the file was last modified) in each file header record. 


Creates a new version of a file if a file with an identical 
specification already exists at the location to which the file is 
being restored or copied. 


Writes over an existing file when an identically named file is 
encountered during the restore operation. 


The /OWNER_UIC qualifier has been superseded by the /BY_ 
OWNER qualifier. Digital recommends that you substitute 
/BY_OWNER for OWNER_UIC in command procedures and 
operator instructions. See the description of the /BY_OWNER 
qualifier for more information. 


Specifies that a BACKUP operation is to ignore any file 
structure on the input volume and to process the volume in 
terms of logical blocks. 


(continued on next page) 
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BACKUP 


/ASSIST 


Format 
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Table 7-3 (Cont.) BACKUP Qualifier Summary 


Qualifier 


/PROTECTION 


/RECORD 


/RELEASE_TAPE 


/REPLACE 


/REWIND 


/SAVE_SET 


/SELECT 
/SINCE 


/TAPE_EXPIRATION 
/TRUNCATE 


/VERIFY 


/VOLUME 


Command Qualifier 


Description 


When you create a save set on disk, this qualifier defines 
the protection to be applied to an output save set. When you 
create a save set on magnetic tape, this qualifier defines the 
protection to be applied to the magnetic tape volume. 


Records the current date and time in the BACKUP date field 
of each file header record once a file is successfully saved or 
copied. 


Dismounts and unloads a tape after a BACKUP save operation 
either writes and verifies the save set, or reaches the end of 
the tape. 


Replaces a file on the output specifier with an identically 
named file from the input specifier. 


As an input save-set qualifier, /REWIND rewinds the input 
tape reel to the beginning-of-tape marker before reading the 
input volume. 


As an output save-set qualifier, /REWIND rewinds the output 
tape to the beginning-of-tape marker and initializes the output 
tape. 


As an input save-set qualifier, /SAVE_SET directs BACKUP to 
treat the input file as a BACKUP save set. 

As an output save-set qualifier, /SAVE_SET directs BACKUP 
to treat the output file as a BACKUP save set. 

Selects the specified files for processing. 


Selects files dated equal to or later than the specified date and 
time. 


Writes a file expiration date other than the current date to the 
file header label of the save set. 


Controls whether a copy or restore operation truncates a 
sequential output file at the end-of-file (EOF) when creating it. 


Specifies that the contents of the output specifier be compared 
with the contents of the input specifier after a save, restore, or 
copy operation is completed. 


Indicates that a specific disk volume in a disk volume set is to 
be processed. 


Allows operator or user intervention during a BACKUP operation if a magnetic 
tape mount request fails or if an operation requires another volume. 


/[NOJASSIST input-specifier output-specifier 


Description 


Example 


/BACKUP 


Format 


BACKUP 
[ASSIST 


The /ASSIST qualifier causes BACKUP to send messages to operator terminals 
when a failure occurs during a BACKUP mount request or when an operation 
requires another volume. BACKUP sends messages to operator terminals enabled 
to receive TAPES and CENTRAL messages. (See the description of the REPLY 
command in the OpenVMS DCL Dictionary for information about enabling and 
disabling operator terminals.) If a failure occurs, the operator can either abort 
the operation or correct the error condition and allow the operation to continue. 


If no operator terminal is enabled to receive TAPES and CENTRAL messages 
and to respond to a mount assist request, a message is displayed informing the 
user of the situation. If a volume is placed in the requested drive, no additional 
operator response is necessary. Any operator reply to a mount request is written 
to SYS$OUTPUT. When BACKUP is run interactively, SYS$OUTPUT is the 
user’s terminal. When BACKUP is run in batch mode, SYS$OUTPUT is the 
batch job log file. 


If you specify /NOASSIST, mount messages appear on your terminal and are not 
sent to the operator. 


The default is /ASSIST. The /NOASSIST qualifier has no effect if the logical name 
SYS$COMMAND points to a device that is not a terminal (as is the case when 
you run BACKUP in a batch job). Specifying /NOASSIST when BACKUP is run 
in batch mode has no effect. 


$ BACKUP/NOASSIST [PAYROLL]*.*;* MTA1:PAYROLL.BCK/LABEL=WKY101 


This command mounts the volume labeled WKY101 on the MTAI tape drive and 
copies all files in the [PAYROLL] directory to a save set named PAYROLL.BCK. 
The /NOASSIST qualifier directs BACKUP to send mount messages to your 
terminal rather than to the operator terminal. The WKY101 label indicates that 
WKY101 is a weekly BACKUP tape in group 1, volume number 01. (If the volume 
label of the tape is not WKY101, you can direct BACKUP to write the save set to 
the tape by choosing the OVERWRITE option at the BACKUP> prompt.) 


Input File-Selection Qualifier 


Selects files according to the BACKUP date written in the file header record by 


the BACKUP/RECORD command. 


input-specifier/BEFORE=time/BACKUP output-specifier 
input-specifier/SINCE=time/BACKUP output-specifier 
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BACKUP 
/BACKUP 


Description 


The /BACKUP qualifier is valid with Files—11 Structure Level 2 volumes only 
and must be used with either the /BEFORE or /SINCE qualifier. You cannot use 
/BACKUP with the /CREATED, /MODIFIED, or /EXPIRED qualifiers in an image 
operation or in a physical operation. 

The /BACKUP qualifier selects files by comparing the date and time recorded in 
the BACKUP field of the file header record with the date and time specified with 
the /BEFORE or /SINCE qualifier. The date and time recorded in the file header 
record is the date and time the file was last saved or copied using the /RECORD 
command qualifier. 

When you use /BACKUP with /BEFOREH, files with a BACKUP date prior to the 
specified date or time are selected. Files with no BACKUP date ((RECORD was 
not specified when the file was saved or copied) are also selected. 


When you use /BACKUP with /SINCEH, files with a BACKUP date equal to or 
later than the specified date or time are selected. Files with no BACKUP date 
(/RECORD was not specified when the file was saved or copied) are also selected. 


Examples 


1. $ BACKUP/RECORD 
_From: [PAYROLL]*.*;*/BEFORE=01-SEP-1993/BACKUP 
_To: MTA1:SEP01.BCK 


In this command, the /BACKUP qualifier combined with the /BEFORE 
qualifier saves all versions of all files in the directory [PAYROLL] that have 
a BACKUP date written before September 1, 1993. The command qualifier 
/RECORD writes the date and time of the save operation to the file header 
record of each saved file. 

2. $ BACKUP/RECORD (ACCOUNTS... ]/SINCE=YESTERDAY/BACKUP MTA1:ACC.BCK 


In this command, the /BACKUP qualifier combined with the /SINCE qualifier 
saves all files in all subdirectories of [ACCOUNTS] that have a BACKUP date 
written since yesterday (24 hours before midnight last night). The command 
qualifier /RECORD writes the date and time of the save operation to the file 
header record of each saved file. 


/BEFORE 


Input File-Selection Qualifier 
Selects files dated earlier than the date and time you specify. 


Format 
input-specifier/BEFORE=time output-specifier 
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Description 


Example 


BACKUP 
/BEFORE 


The /BEFORE qualifier selects files by comparing the date and time in the 
specified field of each file header record with the date and time you specify in the 
command line. The following list shows the other input file-selection qualifiers 
you can use with /BEFORE and their functions. Use these other qualifiers only 
one at a time in your command line. 


/BACKUP Selects files last saved or copied by BACKUP/RECORD 
before the date specified. Also selects files with no BACKUP 
date. 

/CREATED Selects files created before the date specified. 

/EXPIRED Selects files that have expired as of the date specified. 

/MODIFIED Selects files last modified before the date specified. If you 


specify /BEFORE without another qualifier, /MODIFIED is 
used by default. 


Specify the date and time as a delta time or as an absolute time using the format 
[dd-mmm-yyyylI:]][hh:mm:ss.cc]. You can also use one of the following reserved 
words to specify the date and time: 


BACKUP The BACKUP date of the file written by a previous BACKUP 
/RECORD operation (available only on Files—11 Structure 
Level 2 volumes) 


TODAY The current day, month, and year at 00:00:00.0 o’clock 
TOMORROW 24 hours after midnight last night 
YESTERDAY .— 24 hours before midnight last night 


The /BEFORE qualifier is not valid in incremental restore operations. 


$ BACKUP [POLICIES ]*.*;*/BEFORE=TODAY /EXPIRED DMA1:OLDPOL.BCK/SAVE_SET 


This command saves all files in the directory [POLICIES] that have expiration 
dates preceding today’s date. 


/BLOCK_SIZE 


Format 


Description 


Output Save-Set Qualifier 
Specifies the output block size in bytes for data records in a BACKUP save set. 


input-specifier output-save-set-spec/BLOCK_SIZE=n 


You can specify a block size between 2048 and 65,535 bytes. BACKUP may 
adjust this value according to the constraints of the BACKUP format. Although 
BACKUP may adjust the block size you specify, it does not adjust the pIOCK size 
over the maximum of 65,535. 
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BACKUP 


/BLOCK_SIZE 


Example 


/BRIEF 


Format 


Example 
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If you specify /BLOCK_SIZE in a magnetic tape save operation, BACKUP ignores 
any block size defined by the /BLOCK_SIZE qualifier to the DCL command 
MOUNT. 


If the block size is set to a large value for a save set on magnetic tape, it is 
possible for the magnetic tape to run off its reel or for a large number of write 
errors to be logged. If this occurs, avoid using large block sizes. If the problem 
recurs with the same magnetic tape, avoid using that tape for future BACKUP 
operations. 


The default block size for magnetic tape is 8192 bytes; the default for disk is 
32,256 bytes. 


$ BACKUP/RECORD DRA2:(LEE...]/SINCE=BACKUP MTAQ:SAVEWORK.BCK/BLOCK SIZE=10000 


This command saves a directory tree on DRA2 to a magnetic tape mounted 
on drive MTAO. The input file-selection qualifier /SINCE=BACKUP instructs 
BACKUFP to process only those files in the specified directory tree that have 
been modified since the last BACKUP/RECORD operation. The output save- 
set qualifier /BLOCK_SIZE directs BACKUP to assign a block size of 10,240 
(BACKUP rounds the specified block size of 10,000 up to the next multiple of 
512). 


Command Qualifier 


Lists the file specification, size, and creation date for each file in the save set. 
(The size listed is the actual size of the file saved, rather than the number of 
blocks allocated to the file.) The /BRIEF qualifier is valid only with the /LIST 
qualifier and is the default format for BACKUP listings. Specify the /FULL 
qualifier to list the information in a format similar to that displayed by the DCL 
command DIRECTORY/FULL. 


/LIST/BRIEF save-set-spec 


$ BACKUP/LIST/BRIEF DBA2:[SAVE]23MAR93.BCK/SAVE_SET 
Listing of save set(s) 


Save set: 23MAR93.BCK 

Written by: MOROCI 

UIC: [000200,000200] 

Date: 23-MAR-1993 14:18:16.96 

Command: BACKUP [SAVE] DBA2 : [SAVE] 23MAR93.BCK/SAVE_SET 


Operating system: VAX/VMS version 5.5 


BACKUP 
/BRIEF 


BACKUP version: V5.5 
CPU ID register: 08000000 


Node name: _SUZI:: 

Written on: _DBA2: 

Block size: 32,256 

Group size: 10 

Buffer count: 3 

[SAVE] INFO.TXT; 4 5 4-FEB-1993 13:12 
[SAVE ]LAST.DAT;1 1 18-JAN-1993 14:11 
[ SAVE ]WORK.DAT; 3 33. 1-JAN-1993 10:02 


Total of 3 files, 39 blocks 
End of save set 


This command lists the BACKUP summary information and the file name, size, 
and creation date for each file in the save set. Note that the input save-set 
qualifier /SAVE_SET is required to identify the input specifier as a save set ona 
Files—11 medium. 


/BUFFER_COUNT 


Command Qualifier 


This qualifier is obsolete. You can still specify the /BUFFER_COUNT qualifier, 
although it has no effect. (This ensures that command procedures containing this 
qualifier will still operate correctly.) Digital recommends that you remove the 
/BUFFER_COUNT qualifier from command procedures. 


/BY_OWNER 


Format 


Description 


Input File-Selection Qualifier 


Selects files for processing according to the user identification code (UIC). 


input-specifier/BY_OWNER[=[uic]] output-specifier 


If you specify /BY_OWNER without a UIC, BACKUP selects all files whose UIC 
matches that of the current process. 


Specify either a numeric UIC as octal numbers or an alphanumeric UIC in the 

form [g,m]. Wildcards are permitted. Note that the brackets are required. 

[g,m] 

g An octal number in the range 0 to 37776 representing the group number 
or an alphanumeric group name 

m An octal number in the range 0 to 177776 representing the member 
number or an alphanumeric member name 


If you do not specify /BY_OWNER, BACKUP processes all files specified by the 
input specifier. 
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BACKUP 


/BY_OWNER 


Examples 


1. $ BACKUP [SNOW...]/BY OWNER MT$DRIVE:SNOW.BCK/LABEL=TAPE01 


In this example, BACKUP mounts the tape with the label TAPEO1 on drive 
MT$DRIVE and saves all files in the directory and subdirectories of [SNOW] 
with the UIC of the current default process to the save set SNOW.BCK. 


2. $ BACKUP [SUNDANCE]/BY_OWNER=[727,46] DBAl:STABLE.BCK/SAVE_SET 


In this example, all files in the directory [SUNDANCE] with an owner UIC of 
[727,46] are saved to the sequential-disk save set STABLE.BCK on DBAI. 


/BY_OWNER 


Format 


Description 
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Output File Qualifier 


Redefines the owner user identification code (UIC) for restored files. 


input-specifier output-specifier/BY_OWNER[=option] 


The following are available options: 


DEFAULT 


ORIGINAL 


PARENT 


[uic] 


Sets the owner UIC to the user’s current default UIC. This 
option is the default if you do not specify the /BY_OWNER 
qualifier, except in image and incremental restore operations, 
when ORIGINAL is the default option. 


Retains the owner UIC of the file being restored. This option 
is the default if you specify the /BY_OWNER qualifier with 
no option. This option is also the default for incremental 
restore operations. To use this option, the UIC must be 
yours, or you must have the SYSPRV user privilege or be the 
owner of the output volume. 

Sets the owner UIC to the owner UIC of the directory to 
which the file is being restored or copied. To use this option, 
the parent UIC must be yours, or you must have the SYSPRV 
user privilege or be the owner of the output volume. 


Sets the owner UIC to the UIC specified. Use the [g,m] 
format (as described in the input file-selection qualifier /BY_ 
OWNER). To use this option, the UIC must be yours, or you 
must have the SYSPRV user privilege or be the owner of the 
output volume. 


In restore operations where the command qualifier IMAGE or INCREMENTAL 
is specified, the default is /BY_OWNER=ORIGINAL. 


BACKUP 


/BY_OWNER 
Example 
$ BACKUP DBA2:ACCOUNTS .BCK/ SAVE SET [CLEAVER... Ke BY OWNER=PARENT 
In this example, the sequential-disk save set ACCOUNTS.BCK is restored to the 
directory tree [CLEAVER...], assigning each restored file the owner UIC of the 
[CLEAVER] directory. 
/BY_OWNER 
Output Save-Set Qualifier 
Specifies the owner user identification code (UIC) of the save set. 
Format 


Description 


Example 


/COMMENT 


input-specifier output-save-set-spec/BY_OWNER=uic 


If the /BY_OWNER qualifier is omitted, the UIC of the current process is used. 
To use this qualifier on Files—11 save sets, you need the user privilege SYSPRV, 
or the UIC must be your own. 


Specify either a numeric UIC as octal numbers or an alphanumeric UIC in the 
form [g,m]. Wildcards are permitted. Note that the brackets are required. 


[g,m] 


g An octal number in the range 0 to 37776 representing the group number 
or alphanumeric group name 

m An octal number in the range 0 to 177776 representing the member 
number or alphanumeric member name 


$ BACKUP [CLEAVER...] MFA2:ACCOUNTS.BCK/BY OWNER=[301,310]/LABEL=TAPEO1 


In this example, BACKUP mounts the tape with the label TAPEO1 on drive 
MFA2. Next, BACKUP saves the directory tree [CLEAVER...] to a save set 
named ACCOUNTS.BCK. The output save-set qualifier /BY_OWNER assigns an 
owner UIC of [301,310] to the save set. 


Output Save-Set Qualifier 


Places a comment in an output save set. If the comment string is longer than 
one word or if it contains nonalphanumeric characters, you must enclose it in 
quotation marks (" "). A comment can contain up to 1024 characters. 
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BACKUP 
/COMMENT 


Format 


Example 


/COMPARE 


Format 
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input-specifier output-save-set-spec /COMMENT=string 


$ BACKUP [REMARKS] DMA1:20JULREM.BCK/SAVE_ SET - 

$ /COMMENT="Remote operations for July 20, 1993" 
$ BACKUP/LIST DMA1:20JULREM.BCK/SAVE_SET 
Listing of save set 


Save set: 20JULREM.BCK 

Written by: WALRUS 

UIC? [360,054] 

Date: 20-JUL-1993 15:22:06.62 

Command: BACKUP [REMARKS] DMA1:20JULREM.BCK/SAVE_SET/COMMENT=Remote 


operations for July 20, 1993 
Operating system: VMS Version V5.5 


BACKUP version: V5.5 
CPU ID register:  0138084C 


Node name: _ABBEY: : 

Written on: _ABBEYSDMA1: 

Block size: 32256 

Group size: 10 

Buffer count: 3 

[ REMARKS ] BAC. RES; 1 2 20-JUL-1993 14:13 
[REMARKS ]COM.LIS;1 1 20-JUL-1993 14:04 
[REMARKS ]DTOP.DIR;1 1 20-JUL-1993 14:18 


Total of 40 files, 535 blocks 
End of save set 


The first BACKUP command saves the directory [REMARKS] to a sequential-disk 
save set and records a comment. The BACKUP/LIST command displays the 
contents of the newly created save set. Note that the /SAVE_SET qualifier is 
required when creating a save set on disk. 


Command Qualifier 


Compares the save set, device, file, or files specified by the first parameter with 
the contents of the Files—11 device, file, or files specified by the second parameter 
and displays an error message if it finds a difference. 


/COMPARE _file-spec file-spec 
/COMPARE_save-set-spec file-spec 
/IMAGE/COMPARE__ device-spec device-spec 
/PHYSICAL/COMPARE _ device-spec device-spec 


Description 


Examples 


/CONFIRM 


BACKUP 
/COMPARE 


In a BACKUP compare operation, the first parameter can be a Files—11 file or 

a wildcard character representing a set of files, a BACKUP save set on disk or 
magnetic tape, a tape device, or a disk device. The second parameter must be a 
Files—11 disk file, a wildcard character representing a set of files or a Files—11 
disk device, unless you specify the command qualifier /PHYSICAL. When you 
specify /PHYSICAL, and the first parameter specifies a disk device, both disks in 
the compare operation must be mounted with the /FOREIGN qualifier. 


BACKUP displays the following error message if it encounters a difference 
between files it compares: 


$BACKUP-E-VERIFYERR, verification error for 


Use the /COMPARE qualifier to compare a save set with original files or to 
compare files or volumes copied using BACKUP with original files. Because 
BACKUP processes files by blocks, comparing files not produced by BACKUP is 
likely to cause mismatch errors in files that are apparently identical. 


If you do not specify a version number with the file specification, the default is ;* 
(the asterisk wildcard character), which processes all versions of the file. 


Both parameters in a compare operation are input specifiers. 


If you are comparing two entire Files—11 volumes, use an image compare 
operation, as follows: 


$ BACKUP/IMAGE/COMPARE DBA1: DBA2: 


You cannot use the command qualifier /DELETE or /RECORD in compare 
operations. 


Do not perform compare operations on files that were restored or copied using 
the output file qualifier /NEW_VERSION because this qualifier causes version 
numbers to change. 


1. $ BACKUP/COMPARE JAZZ.DAT BLUES.DAT 
This example compares two Files—11 files. Because no version number is 
specified, BACKUP compares all versions of each file. 

2. $ BACKUP/COMPARE/IMAGE MTAO:SWING.BCK DBA2: 


This example compares an image save set stored on magnetic tape and a 
Files—11 volume. 


Input File-Selection Qualifier 


Displays prompts on your terminal for confirmation before processing each file. If 
you want the file to be processed, enter Y or YES and press Return. 
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BACKUP 
/CONFIRM 


Format 


Example 


ICRC 


Format 


Description 


Example 
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input-specifier/CONFIRM output-specifier 


$ BACKUP *.LIS/CONFIRM/LOG DLA2:LIST.BCK/SAVE_SET 
DISK$DEFAULT: [WONDER]CRE.LIS;1, copy? (Y or N): Y 
$BACKUP-S-COPIED, copied DISKSDEFAULT: [WONDER ]CRE.LIS;1 
DISK$DEFAULT: [WONDER]CRETIME.LIS;1, copy? (Y or N): Y 
$BACKUP-S-COPIED, copied DISK$DEFAULT: {[WONDER]CRETIME.LIS;1 
DISK$DEFAULT: [WONDER]EXC.LIS;1, copy? (Y or N): Y | 
$BACKUP-S-COPIED, copied DISKSDEFAULT: [WONDER]EXC.LIS;1 
DISK$DEFAULT: [WONDER]REB.LIS;1, copy? (Y or N): N 
DISK$DEFAULT: [WONDER]SETREB.LIS;1, copy? (Y or N): Y 
$BACKUP-S-COPIED, copied DISKSDEFAULT: [WONDER]SETREB.LIS;1 
DISK$DEFAULT: [WONDER]VERS.LIS;1, copy? (Y or N): N 


$ 

This command locates all files with a file type of .LIS and prompts for 
confirmation before saving each file to LIST.BCK on DLA2. The command 
qualifier /LOG displays information about each file as it is processed. Note that 


you must use the output save-set qualifier SAVE_SET when creating a save set 
on disk. 


Input Save-Set Qualifier 
Specifies that the software cyclic redundancy check (CRC) is to be performed. 


input-save-set-spec/[NO]CRC output-specifier 


The default is /CRC. To disable CRC checking, specify /NOCRC; note that use of 
/NOCRC reduces processing time but increases the risk of data loss. 


$ BACKUP MTA2:928SAVE.BCK/NOCRC [] 


This command restores the save set 928SAVE.BCK to the current default 
directory, indicated by ([]); the input save-set qualifier /NOCRC disables CRC. 


ICRC 


Format 


Description 


Example 


/CREATED 


Format 


Description 


Example 


BACKUP 
ICRC 


Output Save-Set Qualifier 


Specifies whether the software cyclic redundancy check (CRC) is to be computed 
and stored in the data blocks of the output save set. 


input-specifier output-save-set-spec/[NO]CRC 


The default is /CRC. To disable checking, use /NOCRC; note that use of /NOCRC 
reduces processing time but increases the risk of data loss. 


$ BACKUP/RECORD []/SINCE=BACKUP MTA2:928SAVE.BCK/NOCRC 


This command saves all files in the current default directory that have been 
created or modified since the last BACKUP/RECORD operation to the save set 
928SAVE.BCK; the output save-set qualifier /NOCRC disables cyclic redundancy 
checking. 


Input File-Selection Qualifier 


Selects files according to the value of the creation date field in each file header 
record. 


input-specifier/BEFORE=time/CREATED output-specifier 
input-specifier/SINCE=tine/CREATED output-specifier 


You must use either the /BEFORE qualifier or the /SINCE qualifier with . 
/CREATED. The date and time you specify with /BEFORE or /SINCE determine 
which files should be processed. 


You cannot use /CREATED with the /BACKUP, /MODIFIED, or /EXPIRED 
qualifiers. 


$ BACKUP *.SDML/SINCE=YESTERDAY/CREATED DLA2:[SAVEDIR]/SAVE_SET 


The command in this example saves all files with a file type of SDML created 
since yesterday (24 hours before midnight last night). 
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BACKUP 
/DELETE 


/DELETE 


Format 


Description 


Examples 


/DENSITY 


Format 


Description 
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Command Qualifier 


Specifies that a BACKUP save or copy operation is to delete the selected input 
files from the input volume after all files have been successfully processed. 


/DELETE file-spec save-set-spec 


The /DELETE qualifier is valid only when used in a BACKUP save or copy 
operation. You must have sufficient privilege to delete files; if you do not, files 
protected against deletion are not deleted. If you use the command qualifier 
/VERIFY with /DELETE, files that fail verification are not deleted. 


You cannot use /DELETE with the /RECORD or /COMPARE command qualifiers. 


1. $ BACKUP/DELETE BOP.DAT MTAQ:BOP.BCK/LABEL=DANCE 


In this example, the file BOPDAT will be deleted after the save set BOP.BCK 
is successfully created on MTAO. 


2. $ BACKUP/VERIFY/DELETE RAY.DAT,JOE.DAT,ELLA.DAT MTAQ:0SCAR.BCK/LABEL=FRIEND 


The BACKUP command deletes the selected list of files in this example after 
saving them to OSCAR.BCK on MTAO and comparing the output save set 
with the input files. If BACKUP detects a difference between the contents of 
the output save set and the input file, the input file is not deleted. 


Output Save-Set Qualifier 


Specifies the recording density of the output magnetic tape in bits per inch (bits 
/in). You must specify the output save-set qualifier /REWIND with /DENSITY. 


input-specifier output-save-set-spec/DENSITY=n 


The value that you specify must be supported by your magnetic tape hardware. 
If you omit this qualifier, the default density is the current density on the output 
tape drive. 


The /DENSITY qualifier is incompatible with the output save-set qualifier 
/NOREWIND. You must specify the output save-set qualifier /REWIND to 
initialize the magnetic tape when using the /DENSITY qualifier. When you 
specify /DENSITY/REWIND, BACKUP rewinds the tape to the beginning-of-tape. 


BACKUP 
/DENSITY 


Then BACKUP initializes the tape with the new density, removing access to all 
data that previously resided on the tape. 


Example 


$ BACKUP *.PAS MTA2:SAVEPAS.BCK/DENSITY=1600/REWIND/LABEL=PASCAL 


The magnetic tape on drive MTA2 is initialized. All files with a file type of .PAS 
in the current default directory are saved to the save set SAVEPAS.BCK. The 
/DENSITY qualifier sets the recording density to 1600 bits/in. 


/EXACT_ORDER 


Output Save-Set Qualifier 


Depending on the other qualifiers you specify on the command line, the /EXACT_ 
ORDER qualifier allows you to do the following: 


e Specify the exact order of tape volume labels that you want to use ina 
BACKUP operation. 


e Preserve the existing volume label on a tape. 


e Prevent previous volumes of a multivolume save operation from being 
overwritten. 


Format 
input-specifier output-save-set-spec/EXACT_ORDER 


Description 
The /EXACT_ORDER qualifier allows you to do the following: 


e Specify the exact order of tape volume labels that you want to use in a 
BACKUP operation. You must use the /LABEL=(label1,label2,...) qualifier 
to specify the order of the labels. BACKUP continues the operation as long 
as the label of the tape in the drive matches the corresponding label on the 
command line. If you do not specify enough labels on the command line to 
complete the operation, BACKUP prompts you to enter a label for the tape in 
the drive. 


e Preserve the existing volume label on a tape. If you do not use the /LABEL 
qualifier on the command line and the tape has an ANSI label, BACKUP uses 
the existing label. 


¢ Prevent previous volumes of a multivolume save operation from being 
overwritten. BACKUP keeps track of the volume labels you have already 
used in the operation. If you accidently mount one of the previous volumes, 
BACKUP displays the following error message: 


*BACKUP-W-MOUNTERR, volume 1 on MKB100: was not mounted because 
its label does not match the one requested 

Volume with label TAPE] was already used in this save operation 
specify option (QUIT or NEW tape) 

BACKUP> 
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/EXACT_ORDER 


Examples 
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Note the following restrictions when you use the /EXACT_ORDER output 
qualifier: 


e If you use the /EXACT_ORDER qualifier, you cannot specify a label longer 
than six characters on the command line. If you specify a label longer than 
six characters, BACKUP displays the following error message: 


$BACKUP-F-INVQUAVAL, value ‘label name’ invalid for /LABEL qualifier 


e You cannot use the /IGNORE=LABEL_PROCESSING qualifier with the 
/EXACT_ORDER qualifier. 


° You cannot use /REWIND as an output qualifier with the /EXACT_ORDER 
qualifier. 


e If you use the /LABEL qualifier with the /EXACT_ORDER qualifier, you 
cannot specify duplicate labels. 


1. $ BACKUP/IMAGE/RECORD/VERIFY/NOASSIST 
_From: DKA100: 
_To: MKB100:MAR11.SAV/LABEL=(TAPE1,TAPE2,TAPE3) /EXACT ORDER 


This example uses the /EXACT_ORDER qualifier to specify the exact order of 
labels for the BACKUP operation. Note that if you specify the /ASSIST 
qualifier, BACKUP would display messages on the operator terminal. 
BACKUP does the following: 


a. Compares the volume label of the tape in MKB100: with the first label 
that you specified on the command line (TAPE1). If the labels match 
exactly, BACKUP begins the save operation. If the labels do not match or 
if the tape does not have an ANSI label, BACKUP displays the following 
message: 


%BACKUP-W-MOUNTERR, volume 1 on MKB100: was not mounted because 
its label does not match the one requested 

%BACKUP-W-EXLABEER, volume label processing failed because 
volume TAPE4 is out of order, Volume label TAPE1 was expected 
specify option (QUIT, NEW tape, OVERWRITE tape, USE loaded tape) 
BACKUP> OVERWRITE 


Depending on the option you specify, you can quit the backup operation 
(QUIT), dismount the old tape and mount a new one (NEW), overwrite 
the label and the data on the tape (OVERWRITE), or write the data to 
the tape using the loaded tape’s label (USE). 


b. When the operation fills the first tape, it displays the following message: 


$BACKUP-I-RESUME, resuming operation on volume 2 
tBACKUP-I-READYWRITE, mount volume TAPE2 on MKB100: for writing 
Respond with YES when ready: 


c. When you load the second tape and enter YES, BACKUP compares 
the label of the second tape with the second label you specified on the 
command line (TAPE2) just as it did in step la. 


d. Assuming the volume labels match, BACKUP continues processing until 
it completes the operation or runs out of volume labels. If you do not 
specify enough labels on the command line to complete the operation, 
BACKUP prompts you to enter a label for the tape in the drive as follows: 


/EXCLUDE 


Format 


Description 


BACKUP 
/EXACT_ORDER 


$BACKUP-W-MOUNTERR, volume 4 on MKB100: was not mounted because 
the label was not specified 

specify EXACT ORDER label (up to 6 characters) 

BACKUP> 


BACKUP then compares the label on the tape with label you specify as 
described previously. 


2. $ BACKUP/IMAGE/RECORD/VERIFY/NOASSIST 
_From: DKA100: [TEST] 
_To: MKB100:MAR11.SAV/EXACT_ORDER 


Because this example does not use the /LABEL qualifier, BACKUP uses the 
existing label on the tape. If the tape does not have an ANSI label, and it is 
the first tape in the operation, BACKUP displays the following error message: 


tBACKUP-F-NOTANSI, tape is not valid ANSI format 


If the tape does not have an ANSI label, and is not the first tape in the 
operation, BACKUP displays the following error message prompting you to 
specify a label: 


SBACKUP-W-MOUNTERR, volume 2 on MKB100: was not mounted because 
‘the label was not specified 

specify EXACT ORDER label (up to 6 characters) 

BACKUP> 


Note 


BACKUP checks to make sure you specify a valid label. If the label is 
not valid (for example, longer than six characters), BACKUP displays an 
error message. In previous versions of the OpenVMS operating system, 
BACKUP truncated long volume labels. 


Input File-Selection Qualifier 


Excludes files that otherwise meet the selection criteria for a save or copy 
operation. The excluded files are not processed. 


input-specifier/EXCLUDE=(file-spec[,...]) output-specifier 


If you specify more than one file, separate the file specifications with commas and 
enclose the list in parentheses. Do not use a device specification when defining 
the files to be excluded. You can use most standard wildcard characters, but 

you cannot use wildcard characters denoting latest versions of files (;) or relative 
versions of files (;-n). 


Note that BACKUP does not apply temporary file specification defaults within 
the list. Each file specification independently takes its defaults from the file 
specification [000000 ... ]*.*;*. 
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BACKUP 
/EXCLUDE 


Example 


/EXPIRED 


Format 


Description 


Example 
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If you specify directory files (files with the file type .DIR), your command is 
processed but the directory files are not excluded (they are processed). BACKUP 
uses directory files to facilitate incremental restore operations. 


You cannot use the /EXCLUDE qualifier in image restore operations. 


$ BACKUP 
_From: DRA2 : [CONTRACTS ] /BEFORE=TODAY /EXCLUDE=(*.OBJ, *.MAT) 
_To: MFAQ:CONTRACT.BCK/LABEL=DLY102 


All files in the directory [CONTRACTS] that have a modification date prior to 
today (the current day, month, and year at 00:00:00.0 o’clock) are saved to the 
save set CONTRACT.BCK on drive MFAO, except for those with a file type of 
.OBJ or .MAI. 


Input File-Selection Qualifier 


Selects files according to the value of the expiration date field in each file header 
record. 


input-specifier/BEFORE=time /EXPIRED output-specifier 
input-specifier/SINCE=time /EXPIRED output-specifier 


You must use the input file-selection qualifier /BEFORE or /SINCE with 
/EXPIRED. The date and time you specify to /BEFORE or /SINCE determines 
which files are processed. 


You cannot use /EXPIRED with the input file-selection qualifiers /BACKUP, 
/MODIFIED, or /CREATED. 


$ BACKUP [CONTRACTS ]/BEFORE=TOMORROW/EXPIRED MTA1:30DEC.BCK/LABEL=WK04 


This command saves all files in the directory [CONTRACTS] that have an 
expiration date prior to tomorrow (24 hours after midnight last night) to a save 
set named 30DEC.BCK. 


/FAST 


Format 


Description 


Example 


/FULL 


Format 


BACKUP 
/FAST 


Command Qualifier 


Processes the input specifier using a fast file scan to reduce processing time. The 
input specifier must be a Files—11 disk. 


/FAST  input-specifier output-specifier 


The fast file scan reads the index file on the Files—11 disk specified by the input 
specifier and creates a table of files that match the qualifiers you specified. 


To perform a fast file scan, you need write access to the INDEXE.SYS file on the 
input medium, or the input medium must be write-locked. This requirement 

is necessary because BACKUP opens the index file to synchronize with the file 
system, whether or not any update is made. 


A fast file sean is most useful when the input specifier includes most of the files 
on the volume, and file-selection qualifiers (such as those that pertain to date or 
owner) specify a relatively small set of the files named. Because image operations 
implicitly use the fast file scan, the /FAST qualifier is ignored if used with the 
command qualifier /IMAGE. 


You cannot use /FAST in restore operations. 


$ BACKUP/FAST 
_From: DBA1:[*...]/MODIFIED/SINCE=TODAY 
_To: MTAQ:13NOVBAK.BCK,MTAL1: /LABEL=WK201 


In this example, all files on the disk DBA1 that have been modified today are 
saved to a multireel tape save set named 13NOVBAK.BCK. The /FAST qualifier 
is used to reduce processing time. 


Command Qualifier 


Lists the file information produced by the command qualifier /LIST in the format 
provided by the DCL command DIRECTORY/FULL. 


/LIST/FULL  input-specifier [output-specifier] 
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The /FULL qualifier is valid only with the command qualifier /LIST. 


If you do not specify /FULL with /LIST, the /LIST qualifier uses the default 
command qualifier /BRIEF and lists only the file specification, size, and creation 
date of each file. When you specify /FULL, the list includes more information 
from the file header records, such as the BACKUP date, date of last modification, 
number of blocks allocated to the file, file protection and organization, and record 
attributes. 


$ BACKUP/LIST/FULL MTA1:ROCK.BCK 
Listing of save set(s) 


Save set: ROCK. BCK 

Written by: RINGO 

UIC: [900200, 000300) 

Date: 20-AUG-1993 15:39:38.89 

‘Command: BACKUP [.STONES] MTA0:ROCK.BCK/LABEL=BACKUP 


Operating system: VAX/VMS version 5.5 


BACKUP version: v5.5 
CPU ID register: 08000000 


Node name: SUZI:: 

Written on: _MTAO: 

Block size: 8192 

Group size: 10 

Buffer count: 30 

[RINGO.STONES ]GRAPHITE.DAT; 1 
Size: 1/1 Created: 18-AUG-1993 14:10 
Owner: [000200,000200] Revised: 18-AUG-1993 14:10 (2) 
File ID: (91,7,1) Expires: [None specified] 


Backup: [No backup done] 
File protection: System:RWED, Owner:RWED, Group:RE, World: 
File organization: Sequential 


File attributes: Allocation = 1, Extend = 0 
Global Buffer Count = 0 
Record format: Variable length, maximum 255 bytes 


Record attributes: Carriage return 


[RINGO.STONES ]GRANITE.DAT;1 


Size: 1/1 Created: 18-AUG-1993 14:11 
Owner: [000200,000200] Revised: 18-AUG-1993 14:11 (2) 
File ID: (92,9,1) Expires: [None specified] 


Backup: [No backup done] 
File protection: System:RWED, Owner:RWED, Group:RE, World: 
File organization: Sequential 
File attributes: Allocation = 1, Extend = 0 
Global Buffer Count = 0 
Record format: Variable length, maximum 255 bytes 
Record attributes: Carriage return 


Total of 4 files, 16 blocks 
End of save set 


The command in this example lists the files in save set MTA1:ROCK.BCK in full 
format. 


BACKUP 
/GROUP_SIZE 


/GROUP_SIZE 


Format 


Description 


Example 


Output Save-Set Qualifier 
Defines the number of blocks BACKUP places in each redundancy group. 


input-specifier output-save-set-spec/GROUP_SIZE=n 


BACKUP writes redundant information to output save sets to protect against 
data loss. Using the redundant information, BACKUP can correct one 
uncorrectable read error in each redundancy group. The /GROUP_SIZE qualifier 
specifies the number of output blocks written to each redundancy group. The 
value of n can be 0 to 100. The default value is 10. 


If you define a value of 0 for /GROUP_SIZE, no redundancy groups are created 
for the save set. 


$ BACKUP/RECORD DBA1:[*...]/SINCE=BACKUP TAPE: SAVEWORK.BCK/GROUP_SIZE=5 


This BACKUP command saves all files in the current default directory tree that 
have been modified since the last BACKUP/RECORD operation; the /GROUP_ 
SIZE defines the redundancy group size as 5 blocks. 


/IGNORE=option 


Format 


Description 


Command Qualifier 


Specifies that a BACKUP save or copy operation will override restrictions placed 
on files or will not perform tape label processing checks. 


/IGNORE=option input-specifier output-specifier 


The /IGNORE<=option qualifier has four options: 


ACCESSIBILITY Processes files on a tape that is protected by a volume 
accessibility character, or on a tape created by HSC 
Backup. The option applies only to tapes. It affects 
the first tape mounted and all subsequent tapes in 
the save set. | 
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INTERLOCK 


LABEL_PROCESSING 


NOBACKUP 


Processes files that otherwise could not be processed 
due to file access conflicts. Use this option to save 
or copy files currently open for writing. Note that 
no synchronization is made with the process writing 
the file, so the file data that is copied might be 
inconsistent with the input file, depending on the 
circumstances (for example, if another user is editing 
the file, the contents might change). When a file 
open for writing is processed, BACKUP issues the 
following message: 


$BACKUP-W- 
ACCONFLICT, ‘filename’ is open for write by another user. 


The INTERLOCK option is especially useful if you 
have files that are open so much of the time that they 
might not otherwise be saved. The use of this option 
requires the user privilege SYSPRV, a system UIC, or 
ownership of the volume. 


Saves or copies the contents of files to the specified 
magnetic tape volume regardless of the information 
contained in the volume header record. BACKUP 
does not verify the volume label or expiration date 
before writing information to the tape volume. Note 
that you cannot use this option with the /EXACT_ 
ORDER qualifier. 


Saves or copies both the file header record and the 
contents of files marked with the NOBACKUP flag 
by the /NOBACKUP qualifier of the DCL command 
SET FILE. If you do not specify this option, BACKUP 
saves only the file header record of files marked with 
the NOBACKUP flag. 


1. $ BACKUP/IGNORE=INTERLOCK 


From: DUAO:[SUSAN...] 


“To: MTA0: SONGBIRD. BCK/LABEL=TAPE01 


This command saves an entire directory tree and the files in all 
subdirectories, including any files that are open. 


2. $ BACKUP/IGNORE=LABEL PROCESSING *.*;* MFAl:MYFILES.BCK/REWIND 


This command rewinds the tape in drive MFA1 to the beginning-of-tape 
marker, initializes the tape, and creates a save set containing all files in 

the user’s current directory. The command qualifier /IGNORE=LABEL_ 
PROCESSING specifies that no tape label processing checks are done before 
BACKUP initializes the tape. When the tape is initialized, access to data that 
previously resided on the tape is lost. 


AMAGE 


Format 


Description 


BACKUP 
NGNORE=option 


3. $ INITIALIZE/LABEL=VOLUME ACCESSIBILITY:"K" MUA1: 29JUN 
$ BACKUP/IGNORE= (ACCESSIBILITY) 
From: DUAQ:[BOOKS...] 
_To: MUA1:BACKUP.SAV /LABEL=29JUN 


The INITIALIZE command in this example initializes the tape with an 
accessibility character (K) and a volume label (29JUN). The BACKUP 
command mounts the tape, regardless of the accessibility, and performs the 
BACKUP operation. For more information on tape protection, refer to the 
OpenVMS System Manager’s Manual. 


Command Qualifier 


Directs BACKUP to process an entire volume or volume set. 


[IMAGE __input-specifier output-specifier 


To use the /IMAGE qualifier, you need write access to the volume index file 
(INDEXF-.SYS) and the bit map file (BITMAP.SYS), or the input medium must be 
write-locked. BACKUP opens the index file to synchronize with the file system 
(no update is made). Finally, you must have read access to all files on the input 
medium. 


Note 


The input and output devices in an image operation must be different 
except in an image save operation when the output device is a Files—11 
disk save set. 


If the output volume is a disk, all files on the output volume are stored 
contiguously. Contiguous storage of files eliminates disk fragmentation and 
creates contiguous free blocks of disk space. 


Because all files on the input volume are processed, you cannot use input file- 
selection qualifiers in image copy or save operations. You can, however, restore 
files and directories selectively from an image save set. 


When performing image operations on volume sets (more than one volume), the 
number of volumes specified by the output specifier must be equal to the number 
of volumes in the input volume set. 


In an image save or copy operation, BACKUP attempts to save or copy all files 
on the input disk volume including files marked for deletion and lost files (files 
without a directory entry). However, there are two types of files that a BACKUP 
image operation does not save or copy by default. These are files that are flagged 
as NOBACKUP by the DCL command SET FILE/NOBACKUP and files that are 
open for write access by another user at the time of the image save operation. 

If you want these files to be included, specify the command qualifier IGNORE 
in the BACKUP command line. The command qualifier /IGNORE=NOBACKUP 
directs BACKUP to save or copy files flagged as NOBACKUP. The command 
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qualifier /IGNORE=INTERLOCK directs BACKUP to save or copy files open for 
write access by another user. 


An image restore or copy operation initializes the output volume or volume set. 
The initialization data comes from the save-volume summary record of the input 
volume unless the command qualifier /NOINITIALIZE is specified. Specifying 
/NOINITIALIZE directs BACKUP to initialize the output volume using volume 
initialization data that already exists on the output volume. 


In image restore and copy operations, every file is restored or copied. The output 
volume must be mounted using the /FOREIGN qualifier. The new volume is a 
functionally equivalent copy of the input volume; however, file placement will 
change. Files are stored contiguously on the output volume. 


You cannot change the structure level of the output volume in an image restore 
or copy operation. 


1. $ MOUNT/FOREIGN DMA1: 
$MOUNT-I-MOUNTED, mounted on NODESDMA1: 
$ BACKUP/IMAGE/LOG DLA2: DMAI: 
$BACKUP-S-CREATED, created DMA1:[000000]000000.DIR;1 
$BACKUP-S-CREATED, created DMA1:[000000]BACKUP.SYS;1 
$BACKUP-S-CREATED, created DMA1:[000000]CONTIN.SYS;1 
%BACKUP-S-CREATED, created DMA1:[000000]CORIMG.SYS;1 
%BACKUP-S-CREATED, created DMA1:[000000]ELLA.DIR;1 
$BACKUP-S-CREATED, created DMA1:[ELLA]SCAT.DAT;1 
SBACKUP-S-CREATED, created DMA1:[000000]JOE.DIR;1 
%BACKUP-S-CREATED, created DMA1:[JOE]STRINGS.DAT;1 
$BACKUP-S-CREATED, created DMA1:[000000]OSCAR.DIR;1 
%BACKUP-S-CREATED, created DMA1:[OSCAR]KEYS.DAT;1 
$BACKUP-S-CREATED, created DMA1:[000000]VOLSET.SYS;1 


$ 

The MOUNT command prepares the target disk for the image copy operation. 
The command qualifier /LOG directs BACKUP to display information about 
each file copied on your terminal. The BACKUP command initializes DMA1 
and copies the disk volume DLA2 to DMA1. All files on DMAI are stored 
contiguously. 


2. $ BACKUP/IMAGE DBA2: MTAQO:ET.BCK,MTA1: 


This command saves an entire disk volume to a multivolume save set named 
ET.BCK using two magnetic tape drives. 


3. $ MOUNT/FOREIGN DBA1: 
$MOUNT-I-MOUNTED, mounted on NODESDBAI: 
$ BACKUP/IMAGE WORKDISK DBA1:28SEP.BCK/SAVE_ SET 


The MOUNT command prepares the target disk for the image save operation. 
The BACKUP command performs an image save operation to a Files-11 save 
set named 28SEP.BCK. 


BACKUP 
/JINCREMENTAL 


/INCREMENTAL 


Format 


Description 


Example 


Command Qualifier 


Allows you to restore an incremental save set. 


‘INCREMENTAL _save-set-spec disk-device-name 


Use /INCREMENTAL only in restore operations that restore incremental save 
sets. When you use /INCREMENTAL, the output specifier must specify a device 
only; file specifications are not allowed. Also, input save-set qualifiers are not 
allowed in incremental restore operations. 


You can create incremental save sets with the command qualifier /RECORD and 
the file-selection qualifier /SINCE=BACKUP or /SINCE=date. Most sites perform 
daily incremental save operations to keep copies of files created or modified that 
day, and periodic full backups to keep a copy of all files on the disk volume. 
(Digital recommends that you use the command qualifier /IMAGE to perform full 
backups.) 


If a disk volume is lost, corrupted, or destroyed, its contents can be recreated by 
performing the following tasks: 


1. Restore the latest full backup using the command qualifiers /IMAGE and 
/RECORD. 


2. Restore any incremental save sets since the last full backup, in reverse 
chronological order, using the /INCREMENTAL qualifier. 


After you restore the save sets in this order, the output disk volume contains 
the same files it contained when the most recent incremental save operation was 
performed. 


When the /INCREMENTAL qualifier is used, the /BY_OWNER=ORIGINAL 
qualifier is assumed; therefore, you do not need to specify /BY_OWNER unless 
you want to change the original UICs. The INCREMENTAL qualifier can be 
used only on Files—11 Structure Level 2 volumes. 


If you have been performing a combination of full backups and incremental 
save operations on a public volume, and the public volume is lost, corrupted, or 
destroyed, use a procedure like the following to create a new copy of the public 
volume. First, restore the volume from the latest full backup with an image 
restore operation. Note that the /RECORD qualifier is necessary to perform the 
operation correctly. 
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$ MOUNT/FOREIGN DRAO: 

$MOUNT-I-MOUNTED, mounted on _DRAO: 

§ BACKUP/IMAGE/RECORD MTA0:FULLJUN93,MTA1 DRAO: 
%BACKUP-I-RESUME, resuming operation on volume 2 
$BACKUP-I-RESUME, resuming operation on volume 3 
$BACKUP-I-RESUME, resuming operation on volume 4 


$ DISMOUNT/NOUNLOAD DRAO: 


Next, mount the disk as a file-structured volume and restore the incremental save 
sets in reverse chronological order. Finally, restore the weekly incremental save 
sets. The INCREMENTAL qualifier must be used where shown in the following 
example to obtain the correct results: 


$ MOUNT DRAQ: PUBLIC 

t$MOUNT-I-MOUNTED, PUBLIC mounted on _DRAOQ: 
$ BACKUP/INCREMENTAL MTAQ:INCD17JUN DRAO: 
$ BACKUP/INCREMENTAL MTAQ:INCD16JUN DRAO: 
$ BACKUP/INCREMENTAL MTAQ:INCD15JUN DRAO: 
$ BACKUP/INCREMENTAL MTAO:INCW14JUN DRAO: 
$ BACKUP/INCREMENTAL MTAQ:INCW7JUN DRAO: 


Note that BACKUP restores the volume correctly regardless of the order in which 
the incremental save sets are applied; using reverse chronological order is most 
efficient. 


Command Qualifier 


Initializes an output disk volume, making its entire previous contents 
unavailable. 


/[NOJINITIALIZE input-specifier output-specifier 


The /[.NOJINITIALIZE qualifier is valid only when used with the command 
qualifier (IMAGE during restore or copy operations or when saving files to a 
sequential-disk save set. . 


When used with the command qualifier /IMAGE in a restore or copy operation, 
the /INITIALIZE qualifier directs BACKUP to initialize the output volume using 
volume initialization data from the save-volume summary record on the input 
volume. 


The /NOINITIALIZE qualifier directs BACKUP to reinitialize the output volume 
using the existing initialization data on that volume; the output volume must 
have been previously initialized as a Files—11 volume. When the output volume is 
initialized, existing data on the volume is lost. The structure level of the output 
volume must be the same as the structure level of the save set being restored. 


For image restore and copy operations on Files—11 volumes, the default is 
/INITIALIZE. 


BACKUP 
ANITIALIZE 


If you use the /INITIALIZE qualifier when creating sequential-disk save sets, 
BACKUP initializes the first output volume in the sequential-disk save set, as 
well as subsequent volumes. By default, BACKUP does not initialize the first 
volume of a sequential-disk save set but does initialize subsequent volumes of a 
multivolume sequential-disk save set. 


Examples 
1. $ BACKUP/IMAGE/NOINITIALIZE DBAO: DBA2: 
This command causes the output volume DBA2 to be reinitialized using the 
volume initialization data that exists on DBA2. The contents of DBAO are 
then copied to DBA2. 
2, $ BACKUP/IMAGE/INITIALIZE DBA2:OLDFILES.BCK/SAVE_SET DBA6: 
This command directs BACKUP to initialize the output volume DBA6 using 
volume initialization parameters in the save-volume summary record on 
DBA2. The image save set OLDFILES.BCK is then restored to DBA6. 
ANTERCHANGE 
Command Qualifier 
Directs BACKUP to process files in a manner suitable for data interchange 
(software distribution) by excluding information that would prevent other utilities 
or sites from reading the BACKUP save set. 
Format 


Description 


Example 


ANTERCHANGE _input-specifier output-specifier 


The effects of the /INTERCHANGE qualifier are as follows: 
e Directories not selected as files are not copied. 

¢ Access control lists are not copied. 

¢ Block size on magnetic tape is limited to 8192 bytes. 


¢ Normal error recovery is used to write magnetic tapes so that there are no 
bad records on the resulting magnetic tape. 


$ BACKUP/RECORD/INTERCHANGE [ACCOUNTS ]/SINCE=BACKUP MFA0:SAVACC.BCK 


The command in this example saves all files in the directory [ACCOUNTS] 
that have been modified since the last BACKUP/RECORD operation. The 
AINTERCHANGE qualifier ensures that the processed files are suitable for data 
interchange. 
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Command Qualifier 


Specifies that a BACKUP save operation is to create a BACKUP journal file or 
append information to a BACKUP journal file. Lists the contents of a BACKUP 
journal file when combined with the command qualifier /LIST. 


/JOURNAL[=file-spec] input-specifier output-specifier 
/JOURNAL[=file-spec}/LIST[=file-spec] 


A BACKUP journal file contains records of BACKUP save operations and the file 
specifications of saved files. Use the command qualifier /JOURNAL|=file-spec] in 
a BACKUP save operation to create a journal file. 


If you do not include a file specification with the command qualifier /JOURNAL, 
the name of the BACKUP journal file defaults to SYS$DISK:[ JBACKUP.BJL. You 
can specify another file name, however. (The file specification of a journal file 
cannot include a node name; the default file type for a journal file is .BJL.) If the 
specified journal file does not exist, it is created; if the journal file does exist, the 
new journal information is appended to the existing journal file. 


Start a new version of a journal file by creating a zero-length file using the DCL 
command CREATE or a text editor. 


To list the contents of a BACKUP journal file, use the /JOURNAL=[file-spec] 
qualifier with the /LIST qualifier, but do not specify an input or output specifier. 
By default, the list is displayed on SYS$OUTPUT, but it is written to an output 
file if you specify a file with /LIST. 


When listing a journal file, you can use the file-selection qualifiers /BEFORE, 
/SINCE, and /EXCLUDE to search for specific files. (In this context, the 
/BEFORE and /SINCE qualifiers refer to the time when the save set was created, 
not the time when the files in the save set were created.) Also, by specifying a file 
in a multivolume save set, you can search the journal file to find which volume 
the file is in. You can then mount that volume and restore the file. 


Journal files are not created for physical save operations (save operations 
performed with the command qualifier /PHYSICAL). 


1. $ BACKUP/JOURNAL=LAR.BJL [LARRY]*.*;* MFAQ:YET.BCK 


This command saves all versions of all files in the directory [LARRY] to the 
save set YET.BCK on MFAO. The /JOURNAL qualifier creates a record of the 
saved files in a journal file named LAR.BJL in the current default directory. 


2. 


BACKUP 
/JOURNAL 


$ BACKUP/LIST/JOURNAL=ARCH.BJL/SELECT=[ SMITH. PROGS ] /SINCE=5-O0CT-1993 
Listing of BACKUP journal 

Journal file _DB1:[SYSMGR]:ARCH.BJL;1 ON 7-OCT-1993 00:45:43.01 

Save set WKLY.BCK, created on 6-OCT-1993 00:01:34.54 

Volume number 1, volume label WKL101 


[ SMITH. PROGS ] REMINDER. FOR; 46 
[SMITH.PROGS JRUNTHIS .FOR;4 
[SMITH.PROGS ] TIMER. PAS;5 


This example displays all files in the directory [SMITH.PROGS] that 
were saved after October 5, 1993, and listed in the BACKUP journal file 
ARCH.BJL. 


$ BACKUP/JOURNAL/LOG/IMAGE DRA2: MTAQ:30CT.FUL 
%BACKUP-S-COPIED, copied DRA2:[COLLINS ]ALPHA.DAT; 4 
$BACKUP-S-COPIED, copied DRA2: [COLLINS ]EDTINI.EDT;5 


*BACKUP-I-RESUME, resuming operation on volume 2 
SBACKUP-I-READYWRITE, mount volume 2 on MTAQ: for writing 
Press return when ready: 

$BACKUP-S-COPIED, copied DRA2:[LANE]MAIL.MAI;1 
*BACKUP-S-COPIED, copied DRA2:[LANE]MEMO.RNO;5 


$ BACKUP/JOURNAL/LIST 

Listing of BACKUP journal 

Journal file _DB2:[SYSMGR]BACKUP.BJL;1 on 3-OCT-1993 00:40:56.36 
Save set 30CT.FUL created on 3-0CT-1993 00:40:56.36 

Volume number 1, volume label 30CTO1 


[COLLINS ]ALPHA. DAT; 4 

[ COLLINS JEDTINI.EDT;5 

[ COLLINS LOGIN. COM; 46 

[ COLLINS JLOGIN. COM; 45 
[COLLINS ]MAIL.MAI;1 

[ COLLINS .MAR]GETJPI.EXE;9 
[COLLINS .MAR]GETJPI.LIS;14 


[LANE]LES.MAI;1 


Save set 30CT.FUL created on 3-OCT-1993 00:40:56.36 
Volume number 2, volume label 30CT02 


[LANE ]MAIL.MAI;1 


[LANE ]MEMO.RNO;5 
[ LANE ] MEMO. RNO; 4 


[WALTERS .VI]KD.RNO;52 


End of BACKUP journal 
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This example shows how to create a BACKUP journal file and list the 
contents of the BACKUP journal file. 


Output Save-Set Qualifier 


Specifies the volume labels for the magnetic tapes to which the save set is written. 


input-specifier output-save-set-spec/LABEL=(string[,...]) 


Use the label qualifier to specify the one- to six-character volume labels for the 
magnetic tapes to which the save set is written. 


You can specify either a single label or a list of labels with the /LABEL qualifier. 
If you do not specify the /LABEL qualifier, BACKUP uses the first six characters 
of the save-set name as the volume label of the first tape. If you specify a label 

that is longer than six characters, BACKUP truncates the label to six characters. 


If the save set continues to another tape, and you did not specify a volume label 
for the tape, BACKUP uses the first four characters of the previous tape’s volume 
label followed by the volume number of the tape. For example, if the first tape in 
a save set is labeled AAAABB, the second tape in a save set is labeled AAAAO2, 
and the third tape is labeled AAAAO3. 


Before writing a save set to magnetic tape, BACKUP compares the label specified 
in the command line to the volume label of the tape. (If the tape has no volume 
label and you specified the output save-set qualifier /REWIND, BACKUP writes 
the label you specified to the volume header record of the tape.) If the volume 


‘label has fewer than six characters, BACKUP pads the volume label with the 


blank character to six characters. 


The first four characters of the volume label must either exactly match the 
first four characters of the label specified in the BACKUP command line, or the 
first four characters of the volume label must end with one or more underscore 
characters. If the first four characters of the volume label end with one or more 
underscore characters, and the label specified in the command line matches 
the part of the volume label that appears before the underscore characters, 
BACKUP accepts the match. (For example, the volume label ABN_ matches the 
command line label ABN but does not match the command line label ABNE.) If 
either the fifth or the sixth character of the volume label is in the range 0 to 9, 
BACKUP does not compare these characters with corresponding characters in 
the label specified in the BACKUP command line. Otherwise, the fifth and sixth 
characters in the volume label must match the corresponding characters in the 
label specified in the BACKUP command line exactly. 


The following table illustrates volume labels that match labels specified in the 
BACKUP command line: 


BACKUP 
/LABEL 


Label Specified in the 


Command Line Matching Volume Labels 
MAR MAR, MAR_, MAR _nn 
MAR. MAR_, MAR_nn 
MARK MARK, MARKnn 
MARKER MARKER, MARKnn 


If the label you specify matches the tape’s volume label, the BACKUP save 
operation proceeds. If you specify more than one label with the /LABEL qualifier, 
the BACKUP save operation succeeds if any of the labels you specify match 

the tape’s volume label. For example, if the tape’s volume label is MA1686, the 
save operation will succeed if you specify the the following list of labels with the 
/LABEL qualifier: 


/LABEL=(MA1684 ,MA1685 ,MA1686) 


If the label you specified does not match the tape’s volume label, BACKUP 
displays the following messages and prompt on your terminal if you specified the 
command qualifier /NOASSIST, or on the operator terminal if you did not specify 
/NOASSIST: 


%BACKUP-W-MOUNTERR, volume ‘number’ on ‘device’ was not mounted because 
its label does not match the one requested | 
Specify option (QUIT, NEW tape or OVERWRITE tape) 

BACKUP> 


Specify QUIT to abort the BACKUP operation and unload the magnetic tape. 
Specify NEW to direct BACKUP to prompt for a new tape. Specify OVERWRITE 
to direct BACKUP to ignore the label mismatch, mount the tape, initialize the 
tape if you specified the output save-set qualifier /REWIND, and write the save 
set to the tape. 


You can specify the command qualifier /IGNORE=LABEL_PROCESSING to 
prevent BACKUP from verifying the volume label of the tape. You can also use 
the /EXACT_ORDER qualifier to specify the exact order of tape volume labels 
that you want to use in a BACKUP operation. 


Examples 


1. $ BACKUP [PAYROLL] MTA0:30NOV.BCK/LABEL=PAY 


This command causes BACKUP to check the volume label of the tape 
mounted on drive MTAO. If the volume label is PAY, BACKUP saves the 
directory [PAYROLL] to a save set named 30NOV.BCK. 


2. $ BACKUP DDA1: MTA0:PLAYS.BCK,MTA1,MTA2/REWIND/LABEL=(ACT1,ACT2,ACT3) 


This example assumes that the three tapes have no volume labels. This 
command saves all files on the disk named DDA1 to the save set PLAYS.BCK. 
The first tape in the save set is labeled ACT1, the second is labeled ACT2, 
and the third is labeled ACTS. 
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Command Qualifier 


Lists information about a BACKUP save set and about the files in a save set. You 
can display the list on your terminal or write it to a file. 


/LIST[=file-spec] save-set-spec 


Use the /LIST qualifier by itself or in conjunction with any other operation (save, 
restore, copy, compare, or journal). If /LIST is specified by itself (not with a save, 
restore, copy, compare or journal operation), the input specifier must refer to a 
save set, and the output specifier must be omitted. 


Before you can list the contents of a save set, the media containing the save set 
must be inserted into an appropriate drive. If the save set is stored on a disk, 
the disk must be mounted as a Files—11 volume or as a foreign volume. BACKUP 
mounts magnetic tapes automatically as part of the list operation. 


By default, the list information is displayed on your terminal; however, you can 
specify a file to which the list information can be written. 


When you use the /LIST qualifier with standalone BACKUP and you direct output 
to a file ((LIST=file-spec), the file specification must refer to either a terminal or a 
printer. 


You can use either the command qualifier /BRIEF or /FULL with the /LIST 
qualifier. The /BRIEF qualifier directs BACKUP to list each file’s size in blocks 
and its creation date. The /FULL qualifier directs BACKUP to list additional 
information about each file in the same format as the information provided by the 
DCL command DIRECTORY/FULL. The default is /BRIEF. 


Do not use the command qualifier /LOG with /LIST when the output for /LIST is 
directed to the terminal; if you do, you will receive confusing output. 


$ BACKUP/LIST DBA2:[SAVE]23MAR93. BCK/SAVE_SET 
Listing of save set(s) 


Save set: 23MAR93.BCK 

Written by: MOROCI 

UIC: [000200,000200] 

Date: 23=MAR-1993 14:18:16.96 

Command: BACKUP [SAVE] DBA2:[SAVE]23MAR93.BCK/SAVE_SET 


Operating system: VAX/VMS version 5.5 


BACKUP version: v5.5 
CPU ID register: 08000000 


Node name: SUZI:: 
Written on: _DBA2: 
Block size: 32,256 
Group size: 10 
Buffer count: 3 


/LOG 


Format 


Example 


BACKUP 


/LIST 
[ SAVE] LAST. DAT; 1 1 18-JAN-1993 14:11 
[SAVE] INFO. TXT; 4 5 4-FEB-1993 13:12 
[ SAVE ]WORK. DAT; 3 33. 1-JAN-1993 10:02 


Total of 3 files, 39 blocks 
End of save set 


This command lists the BACKUP summary information and the file name, size, 


and creation date for each file in the save set. Note that the /SAVE_SET qualifier 
is required to identify the input specifier as a save set on a Files—11 disk. 


Command Qualifier 


Determines whether the file specification of each file processed is displayed on 
SYS$OUTPUT during the operation. The default is /NOLOG. 


/[NO]LOG _input-specifier output-specifier 


$ BACKUP/LOG [{SAVE]23MAR93.BCK/SAVE SET DBA2:[PLI.WORK] 
$BACKUP-S-CREATED, created DBA2:[PLI.WORK]ANOTHER.DAT;1 
*BACKUP-S-CREATED, created DBA2:[PLI.WORK]LAST.DAT;1 
*$BACKUP-S-CREATED, created DBA2:[PLI.WORK]THAT.DAT;1 
$BACKUP-S-CREATED, created DBA2:[PLI.WORK]THIS.DAT;2 


In this example, the file specifications of the files restored to the directory named 
[PLI.WORK] on DBA2 are logged to SYS$OUTPUT. 


/MEDIA_FORMAT=[NO]COMPACTION 


Format 


Output Save-Set Qualifier 


Controls whether data records are automatically compacted and blocked together. 
Data compaction and record blocking increase the amount of data that can be 
stored on a single tape cartridge. 


The compaction ratio depends on the data and the tape drive you use. For more 
information, see the documentation supplied with your tape drive. 


input-specifier output-save-set-spec /MEDIA_FORMAT=[NO]COMPACTION 
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The /MEDIA_FORMAT qualifier can only be used with tape drives that support 
data compaction. 


Once data compaction has been selected for a tape cartridge, compaction is 
used for the entire cartridge until you initialize the cartridge with the /MEDIA_ 
FORMAT=NOCOMPACTION qualifier. 


$ BACKUP WORK$:[TESTFILES...]*.*;* MUAQ:TEST.SAV - 
_$/MEDIA_FORMAT=COMPACTION /REWIND 


This command saves all files in the directory [TESTFILES] and its subdirectories 
in a save set named TEST.SAV using a TAQ9OE tape drive. The /MEDIA__ 
FORMAT=COMPACTION qualifier specifies that the tape drive automatically 
compacts and blocks together data records on the tape. 


Input File-Selection Qualifier 


Selects files according to the value of the modified date field (the date the file was 
last modified) in each file header record. 


input-specifier/BEFORE=time /MODIFIED output-specifier 
input-specifier /SINCE=time /MODIFIED output-specifier 


You must use the /MODIFIED qualifier with either of the input file-selection 
qualifiers /BEFORE or /SINCE. The date and time you specify with /BEFORE or 
/SINCE determines which files are processed. 


You cannot use /MODIFIED with the input file-selection qualifiers /BACKUP, 
/CREATED, or /EXPIRED. 


$ BACKUP [SUNDANCE... ] /BEFORE=TODAY/MODIFIED MFA1:MOD.BCK 


This command saves all files in the directory tree [SUNDANCE] whose 
modification dates precede today (00:00:00.0 o’clock of the current day, month, 
and year). 
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/OVERLAY 


Format 


Output File Qualifier 


Creates a new version of a file if a file with an identical specification already 
exists at the location to which the file is being restored or copied. 


input-specifier output-specifier/NEW_VERSION 


If BACKUP attempts to copy or restore a file when a file with an identical 
directory name, file name, type, and equal or higher version number already 
exists, a new file is created with the same name and type and a version number 
one higher than the highest existing version. 


If you do not use /NEW_VERSION, /REPLACE, or /OVERLAY, and the version 
number of the file being restored is equal to or less than the version number of 
the existing file. BACKUP reports an error in copying or restoring the file. 


Note that when copying or restoring files using the /NEW_VERSION qualifier, 
files are processed in decreasing version number order and are created in 
ascending order. The result is that the version numbers are inverted. 


Because this qualifier causes version numbers to change, using it with the 
/VERIFY qualifier will cause unpredictable results. Digital recommends that you 
do not use the /NEW_VERSION qualifier with the /VERIFY qualifier. 


$ BACKUP MTA1:NOV30REC.BCK/SELECT=*.DAT [RECORDS...]/ NEW_VERSION 


This example restores all files with the file type of .DAT from the magnetic tape 
save set NOV30REC.BCK to the directory [RECORDS]. The /NEW_VERSION 
qualifier instructs BACKUP to restore each file with the file type .DAT regardless 
of whether a file with the same file specification already exists. 


Output File Qualifier 


Writes the input file over a file with an identical specification at the output 
location. 


input-specifier output-specifier/OVERLAY 
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BACKUP 
/OVERLAY 


Description 


Example 


If BACKUP attempts to copy or restore a file when a file with an identical 
directory name, file name, type, and version number already exists, the new 
version of the file is written over the existing version. The file identification of 
the new version is the same as the file identification of the file that is overwritten. 


The physical location of the file on disk does not change. If /OVERLAY is 
specified, and the new file is larger than the one already present, BACKUP 
allocates more blocks on the disk and extends the file. 


When you do not use /OVERLAY, /REPLACE, or /NEW_VERSION, and the 
version number of the file being restored is identical to the version number of the 
existing file, BACKUP reports an error in copying or restoring the file. 


$ BACKUP DRA1:MAR30SAV.BCK/SAVE_SET [RECORDS...]/OVERLAY 


The sequential-disk save set MAR30SAV.BCK is restored to the directory tree 
[RECORDS...]. If a file from the save set has a specification that is identical 

to a file that already exists in [RECORDS...], the /OVERLAY qualifier directs 
BACKUP to write over the existing version. 


/OWNER_UIC 


/PHYSICAL 


Format 


Description 
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The /OWNER_UIC qualifier has been superseded by /BY_OWNER. Digital 
recommends that you substitute /BY_OWNER for /OWNER_UIC in command > 
procedures and operator instructions. See the description of /BY_OWNER for 
more information. 


Command Qualifier 


Specifies that a BACKUP operation is to ignore any file structure on the input 
volume and to process the volume in terms of logical blocks. 


/PHYSICAL _ input-specifier output-specifier 


In a physical operation, BACKUP saves, restores, copies, or compares the entire 
volume in terms of logical blocks. 


The input and output specifiers for physical volumes must be device names, 
and they cannot be the same device. Also, the following qualifiers are ignored if 
specified with the /PHYSICAL qualifier: /DELETE, /IMAGE, /INCREMENTAL, 
/JOURNAL, and /RECORD. 


Examples 


BACKUP 
/PHYSICAL 


For physical copy operations between disks, the output disk must be the same 
type of device as the input disk; for example, a BACKUP/PHYSICAL operation 
cannot be performed between an RPO5 input disk and an RP06 output disk. The 
output disk must not have a bad block in any location that corresponds to a good 
block on the input disk. (This restriction does not apply to RA series disks.) 


For physical save operations between disks, the output disk must be the same 
type of disk as the input disk or a larger capacity disk. The output disk must not 
have a bad block in any location that corresponds to a good block on the input 
disk. (This restriction does not apply to RA series disks.) 


For physical restore operations between disks, the output disk must be the same 
type of device as the disk from which the save set was created. The output disk 
must not have a bad block in any location that corresponds to a good block on the 
disk from which the save set was created. (This restriction does not apply to RA 
series disks.) 


An output disk of a physical operation must be mounted using the DCL command 
MOUNT/FOREIGN. An input disk of a physical operation must either be 
mounted using the DCL command MOUNT/FOREIGN, or the user must have the 
user privilege LOG_IO or PHY_IO. 


You can perform physical save and restore operations using magnetic tapes. 
BACKUP mounts magnetic tapes automatically as foreign devices. 


A save set written using the /PHYSICAL qualifier can only be read as a physical 
save set; conversely, a file-structured save set can only be read with file-structured 
restore or compare operations. 


Note 


BACKUP/PHYSICAL does not copy the first track (track 0) of RX01 — 
RX02 diskettes; Digital does not support track 0. 


1. $ MOUNT/FOREIGN DYA0: 
$ MOUNT/FOREIGN DYA1: 
$ BACKUP/PHYSICAL DYAQ: DYA1: 


This example mounts RX02 diskettes in DYAO and DYA1 as foreign devices 
and copies the contents of the diskette mounted in DYAO to the diskette 
mounted in DYA1. 


2. $ MOUNT/FOREIGN DBAI: 
$ BACKUP/PHYSICAL MTA0:28SEP.BCK DBAL: 


This command restores a physical save set named 28SEP.BCK to DBAI. 
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BACKUP 


/PROTECTION 


/PROTECTION 


Format 


‘Description 


Example 
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Output Save-Set Qualifier 


When you create a save set on disk, this qualifier defines the protection to be 
applied to an output save set. When you create a save set on magnetic tape, this 
qualifier defines the protection to be applied to the magnetic tape volume. (All 
save sets created subsequently on the tape will receive this same protection until 
the tape is initialized.) 


input-specifier output-save-set-spec/PROTECTION|[=(code)] 


Because the file system treats a BACKUP save set as a single file, it is crucial 
that you protect save sets adequately. If you do not specify adequate protection, 
anyone who has access to a save set can access any file in the save set. 


The protection code indicates the type of access (read, write, execute, and delete) 
available to the four categories of users (system, owner, group, and world). 

For more information on specifying protection codes, see the OpenVMS User’s 
Manual. 


If the save set is written to either a Files—11 disk or a sequential disk and 
/PROTECTION is not specified, BACKUP applies the process default protection to 
the save set. If /PROTECTION is specified, any protection categories not specified 
default to your default process protection. 


Protection information is written to the volume header record of a magnetic 
tape, and applies to all save sets stored on the tape. Therefore, you must 
specify the output save-set qualifier /REWIND in order to specify the 
/PROTECTION qualifier for a magnetic tape. (If you do not specify /REWIND 
with /PROTECTION, the protection information, if any, in the volume header 
record is not changed.) If the save set is written to magnetic tape and 
/PROTECTION is not specified, BACKUP applies no protection to the tape. 

If you specify /PROTECTION, any protection categories that you do not specify 
default to your default process protection. 


In order to initialize a magnetic tape volume that was previously initialized with 
the /PROTECTION qualifier, you must own the volume (your UIC matches the 
UIC of the volume) or have the VOLPRO privilege. 


$ BACKUP 

_From: (CLEAVER... ] 

_To: MFA2:ACCOUNTS.BCK/BY_OWNER=[ 301,310] /REWIND/LABEL=BANK01- 
_$ /PROTECTION=(S:RWE,0:RWED,G:RE,W) 


This command saves the directory tree [CLEAVER...] to a save set named 
ACCOUNTS.BCK on the magnetic tape labeled BANKO1. The output save-set 
qualifier /REWIND directs BACKUP to rewind the tape and initialize it before 
performing the save operation. The output save-set qualifier /BY_OWNER 
assigns an owner UIC of [301,310] to the magnetic tape. The /PROTECTION 
qualifier assigns the owner of the magnetic tape read, write, execute, and delete 
access. SYSTEM users are assigned read, write, and execute access; GROUP 


/RECORD 


Format 


Description 


Example 


BACKUP 
/PROTECTION 


users are assigned read and execute access; and WORLD users are assigned no 
access. 


Command Qualifier 


Records the current date and time in the BACKUP date field of each file header 
record once a file is successfully saved or copied. 


/RECORD _input-specifier output-specifier 


The /RECORD qualifier can be used only on Files—11 Structure Level 2 volumes. 
The user privilege SYSPRV is required to use the /RECORD qualifier on files 
other than those owned by your UIC. 


When you use /RECORD in a copy or save operation, BACKUP writes the date 
and time that the copy or save set was created in the BACKUP date field of each 
file header record. 


When you use /RECORD to perform incremental save operations on a disk 
volume, do not allow other users to use /RECORD in their BACKUP operations 
on the same disk volume. If other users specify /RECORD, the dates in the 
BACKUP date fields of file header records will change. This makes it impossible 
for you to save all files created or modified since you last performed a save 
operation. 


If you use the command qualifier /VERIFY with /RECORD, files that fail 
verification are not recorded. 

If /RECORD is not specified, the BACKUP date field of each processed file is not 
changed. 


You cannot use the /RECORD qualifier with the command qualifier /DELETE or 
/COMPARE. 


$ BACKUP/RECORD DBA1:[*...]/SINCE=BACKUP MTA0:13MAY.BCK 


This command saves all files on DBA1 that have been created or modified since 
the last save operation and records the current date and time in each file header 
record. 
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BACKUP 


/RELEASE_TAPE 


/RELEASE_TAPE 


Format 


Description 


Examples 


/REPLACE 
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Command Qualifier 


Dismounts and unloads a tape after a BACKUP save operation writes a save set 
to the tape. 


/RELEASE_TAPE input-specifier output-specifier 


By using the /RELEASE_TAPE qualifier in conjunction with either the (DELETE 
or /RECORD qualifiers, you can make a tape drive available for other operations 
before the BACKUP command completes. You can also use the /RELEASE_ 
TAPE qualifier without the /DELETE or /RECORD qualifiers, in which case the 
/RELEASE_TAPE qualifier dismounts and unloads the tape in the drive after the 
BACKUP command completes. 


You cannot use the /RECORD and /DELETE qualifiers in the same BACKUP 
command. 


1. $ BACKUP/IMAGE/RECORD/RELEASE TAPE DUA1: MUA0:BACK.BCK 


The command in this example backs up the disk DUAI to the save set 
BACK.BCK. By using the /RELEASE_TAPE and /RECORD qualifiers, 
BACKUP dismounts and unloads the tape in MUAO (making it available for 
other operations) before it performs the action of the /RECORD qualifier. 


2. $ ALLOCATE MUAO: TAPE 
$ BACKUP/DELETE/RELEASE TAPE/LOG DUA1:[MAIN...] MUAQ:MAIN.BCK 


$ DEALLOCATE TAPE 


The commands in this example back up some directories on a disk named 
DUAI, and then delete the files that have been backed up. The /RELEASE_ 
TAPE qualifier dismounts and unloads the tape (making it available for 
other operations) before the /DELETE qualifier performs its action. The tape 
remains allocated until you enter the DEALLOCATE command. 


Output File Qualifier 


Replaces a file on the output specifier with an identically named file from the 
input specifier. 


Format 


Description 


Example 


BACKUP 
/REPLACE 


input-specifier output-specifier/REPLACE 


When you use /REPLACE in a copy or restore operation, and an identically 
named file exists in both the input and output specifiers, BACKUP does the 
following: 


¢ Copies or restores a new version of the file with the same directory 
specification, file name, type, and version number 


¢ Deletes the copy of the file that previously existed on the output disk 


In this way, the previous copy of the file is replaced with the restored version. 
Note that the version number is not incremented because the old copy of the file 
is deleted. If you want to keep the versions from both the input and the output 
specifiers, use the output file qualifier /NEW_VERSION. 


If you do not use /REPLACE, /OVERLAY, or /NEW_VERSION, and the version 
number of the file being restored is identical to the version number of the existing 
file, BACKUP reports an error and does not restore the file. 


$ BACKUP MUA0:SAVEWORK.BCK/SELECT=[LEE...] DUAQ:[LEE...]/REPLACE 


The command in this example restores the directory tree [LEE...] (and all files 
in the directory tree) from a magnetic tape save set to disk. The input save-set 
qualifier /SELECT specifies the directory tree to be selected from the save set, 
and the output file qualifier /REPLACE instructs BACKUP to first create a new 
version of an input file if there is a file on the output medium with the same 
file specification and then to delete the file that originally existed on the output 
medium. 


/REWIND (input save-set qualifier) 


Format 


Description 


Input Save-Set Qualifier 


Rewinds the input tape reel to the beginning-of-tape marker before reading the 
input volume. 


input-save-set-spec/[NO]JREWIND output-specifier 


The /[NO]JREWIND qualifier is for magnetic tape volumes only. 


The /REWIND qualifier directs BACKUP to rewind the input magnetic tape to 
the beginning-of-tape marker before reading the input volume. Then BACKUP 
locates the input save set. In this way, BACKUP can find the input save set if it 
is located before the current tape position. 
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BACKUP 


/REWIND (input save-set qualifier) 


Example 


The /NOREWIND qualifier indicates that BACKUP should not rewind the input 
volume before processing the command. Instead, BACKUP proceeds toward the 
logical end-of-tape (the end of the last save set stored on the tape). Therefore, if 
the specified save set is located before the current position of the tape, BACKUP 
is unable to find it. 


The default is /NOREWIND. You must specify /REWIND to rewind the tape. 


$ BACKUP MFA1:CONTRACTS.BCK/REWIND DBA2:[*...]/BY_OWNER=ORIGINAL 


In this example, the save set CONTRACTS.BCK is restored to the disk volume 
mounted on DBA2. The /REWIND qualifier rewinds the magnetic tape to 

the beginning-of-tape marker before reading the input volume to search for 
CONTRACTS.BCK. The output file qualifier /BY_OWNER restores the original 
owner UICs. 


/REWIND (output save-set qualifier) 


Format 


Description 
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Output Save-Set Qualifier 


Rewinds the output tape to the beginning-of-tape marker and initializes the 
output tape. The /NOREWIND qualifier causes the tape to wind forward to the 
logical end-of-tape (the end of the last save set stored on the tape) and to begin 
writing the save set there. 


input-specifier output-save-set-spec/[NOJREWIND 


The /[NOJREWIND qualifier is for magnetic tape volumes only. 


If you specify (REWIND, BACKUP rewinds to the beginning of the magnetic 
tape and searches the volume header record for a volume label. If the volume 
header record contains no volume label, BACKUP writes the label specified in the 
BACKUP command to the volume header record, initializes the tape, and creates 
the save set on the tape. 


If no label is specified explicitly in the command line, BACKUP uses the first 

six characters of the save-set name as the volume label of the first tape in a 
multivolume save set and the first four characters of the save-set name followed 
by the volume number of the tape as the volume label of subsequent tapes. You 
can also specify a label or list of labels explicitly with the /LABEL qualifier. If 
you do not specify enough labels with the /LABEL qualifier, BACKUP uses the 
first four characters of the final label in the list followed by the volume number of 
the tape as the volume label of subsequent tapes. 


If BACKUP finds a volume label’ on the tape, it compares the volume label with 
the label you specified in the BACKUP command line (either explicitly with the 
/LABEL qualifier or implicitly through the save-set name) and ensures that the 
tape is expired. 


BACKUP 
/REWIND (output save-set qualifier) 


If the volume label is fewer than six characters long, BACKUP pads the volume 
label with the blank character to six characters. The first four characters 

of the volume label must either match the first four characters of the label 
specified in the BACKUP command line exactly, or the first four characters of 
the volume label must end with one or more underscore characters. If the first 
four characters of the volume label end with one or more underscore characters, 
and the label specified in the command line matches the part of the volume label 
that appears before the underscore characters, BACKUP accepts the match. (For 
example, the volume label ABN_ matches the command line label ABN but does 
not match the command line label ABNE.) If either the fifth or sixth character 
of the volume label is in the range 0 to 9, BACKUP does not compare these 
characters with corresponding characters in the label specified in the BACKUP 
command line. Otherwise, the fifth and sixth characters in the volume label 
must match the corresponding characters in the label specified in the BACKUP 
command line exactly. The following table illustrates volume labels that match 
labels specified in the BACKUP command line: 


Label Specified in the 


Command Line Matching Volume Labels 
MAR MAR, MAR_, MAR _nn 
MAR _ MAR_, MAR nn 
MARK MARK, MARKnn 
MARKER MARKER, MARKnn 


You can specify more than one label with the /LABEL qualifier. If any label 
specified in the BACKUP command line matches the volume label of the tape and 
the tape is expired, BACKUP overwrites the volume label of the tape with the 
same volume label. 


By overwriting the tape’s volume label, BACKUP initializes the tape, removing 
access to any data that previously resided on the tape and preparing the tape 
to receive new data. During the initialization process, BACKUP writes the 
values specified with the output save-set qualifiers /TAPE_EXPIRATION, 
/PROTECTION, and /BY_OWNER to the volume header record. (If these 
qualifiers are not specified, the default tape expiration date is today, the default 
protection is none, and the owner UIC of the tape is the UIC of the current 
process.) After initializing the tape, BACKUP writes the save set to the tape. 


If the label in the BACKUP command line did not match the volume label of the 
tape, BACKUP displays the following message and prompt on your terminal if 
you specified the command qualifier /NOASSIST, or on the operator terminal if 
you did not specify /NOASSIST: 


$BACKUP-W-MOUNTERR, volume ‘number’ on ‘device’ was not mounted because 
its label does not match the one requested 

Specify option (QUIT, NEW tape or OVERWRITE tape) 

BACKUP> 


If you enter QUIT at the BACKUP> prompt, BACKUP aborts, unloads the 
magnetic tape, and issues the following message: 


SBACKUP-F-ABORT, operator requested abort on fatal error 
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BACKUP 


/REWIND (output save-set qualifier) 
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If you enter NEW at the BACKUP> prompt, BACKUP unloads the magnetic tape 
and issues the following prompt for a new tape: 


SBACKUP-I-READYWRITE, mount volume ‘volume-number' on ‘device-name’: for writing 
Enter "YES" when ready: 


If you enter OVERWRITE at the BACKUP> prompt, BACKUP overwrites the 
old volume label with the new volume label. (OVERWRITE instructs BACKUP 
to ignore the fact that either the tape has not expired or that the labels do not 
match.) By overwriting the tape’s volume label, BACKUP initializes the tape, 
removing access to any data that previously resided on the tape and preparing 
the tape to receive new data. 


During the initialization process, BACKUP writes the values specified with 

the output save-set qualifiers /TAPE_EXPIRATION, /PROTECTION, and /BY_ 
OWNER to the volume header record. After initializing the tape, BACKUP writes 
the save set to the tape. 


If the tape is not expired, BACKUP displays the following message and prompt 
on your terminal if you specified the command qualifier /NOASSIST, or on the 
operator terminal if you did not specify /NOASSIST: 


$BACKUP-W-MOUNTERR, volume ‘number’ on ‘device’ was not mounted because 
its expiration date is in the future 

Specify option (QUIT, NEW tape or OVERWRITE tape) 

BACKUP> 


Always specify /REWIND when the output tape has a non-ANSI or non-ISO label 
or when the output tape has never been initialized. 


The /NOREWIND qualifier directs BACKUP to compare the volume label of the 
tape with the label you specified in the BACKUP command before performing the 
save operation. You can specify a label explicitly with the /LABEL qualifier; 
otherwise, BACKUP uses the first six characters of the save-set name as 

the volume label. If the volume label does not match the label you specified, 
BACKUP displays the following message and prompt on your terminal if you 
specified the command qualifier /NOASSIST, or on the operator terminal if you 
did not specify /NOASSIST: 


%BACKUP-W-MOUNTERR, volume ‘number’ on ‘device’ was not mounted because 
its label does not match the one requested 

Specify option (QUIT, NEW tape or OVERWRITE tape) 

BACKUP> 


If you choose the OVERWRITE option, BACKUP ignores the fact that the volume 
labels do not match. If the labels match, or if you choose the OVERWRITE 
option, BACKUP winds the tape forward to the logical end-of-tape (the end of the 
last save set stored on the tape) and writes the save set to the tape. If the logical 
end-of-tape is also the physical end of the tape, BACKUP requests a new tape. 
Because BACKUP searches for the end of data on the tape, you cannot write a 
new save set to a tape if it ends with a save set that is continued onto another 
tape. 


Although the /NOREWIND qualifier does not initialize the first tape in a 
multivolume save set, BACKUP initializes subsequent tapes in a multivolume 
save set. BACKUP ensures that the tape is expired and that the tape labels 
match before initializing subsequent volumes in a multivolume save set. 


The default is /NOREWIND. You must specify /REWIND to rewind and initialize 
a magnetic tape volume. Note that you cannot use the /REWIND qualifier with 
the /EXACT_ORDER qualifier. 


Example 


ISAVE_SET 


Format 


Description 


Examples 


BACKUP 
/REWIND (output save-set qualifier) 


$ BACKUP 
_From: *. RNO 
_To: MTAO : DSRSAVE. BCK/REWIND/LABEL=DSRO1/TAPE EXPIRATION=29-JUN-1993 


The command in this example initializes a new magnetic tape and writes 

the volume label DSRO1 and a tape expiration date of June 29, 1993 to the 
tape’s volume header record. Then this command saves all files in the current 
default directory with a file type of .RNO to the magnetic tape save set named 
DSRSAVE.BCK. 


Input Save-Set Qualifier 


Directs BACKUP to treat the input file as a BACKUP save set. You must specify 
/SAVE_SET when the input specifier refers to a BACKUP save set on disk. 


input-save-set-spec/SAVE_SET output-specifier 


The /SAVE_SET qualifier allows you to refer to a BACKUP save set on a local 
Files—11 disk, a remote Files—11 disk, or a sequential disk. If you do not specify 
/SAVE_SET, an input specifier that refers to a disk is treated as a Files—11 file. 
An input specifier that refers to tape is always treated as a BACKUP save set. 


1. $ BACKUP DBA2 : [BACKUP ]1212MAR3.BCK/SAVE_SET DBAL:[*...] 
This command restores a save set named 1212MAR3.BCK from DBA2 to 
DBAI1. 

2. $§ BACKUP/LIST DBA2:[SAVE]23MAR93.BCK/SAVE_SET 


This command lists the BACKUP summary information and the file name, 
size, and creation date for each file in the save set named 23MAR93.BCK. 
The /SAVE_SET qualifier is required to identify the input specifier as a save 
set on a disk. 


3. $ BACKUP/LOG DBA2:[SAVE]23MAR93.BCK/SAVE SET DBA3:[PLI.WORK] 


This command restores the directory that was listed in Example 2. File 
specifications are logged to SYS$OUTPUT as the files are restored. 
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BACKUP 
ISAVE_SET 


ISAVE_SET 


Format 


Description 


Examples 


[SELECT 


Format 
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Output Save-Set Qualifier 


Directs BACKUP to treat the output file as a BACKUP save set. You must specify 
the /SAVE_SET qualifier when the output specifier refers to a BACKUP save set 
on disk. 


input-specifier output-save-set-spec/SAVE_SET 


The /SAVE_SET qualifier allows you to create a BACKUP save set on a local 
Files—11 disk, a remote Files—11 disk, or a sequential disk. If you do not specify 
/SAVE_SET, an output specifier that refers to disk is treated as a Files—11 file. 
An output specifier that refers to tape is always treated as a BACKUP save set. 


1. $ BACKUP [HILL] DBA1: [BACKUP ]SEP28.BCK/SAVE_SET . 
This command saves the directory [HILL] to a save set named SEP28.BCK on 
a Files—11 disk. 

2. $ BACKUP DBA2:[PLI.WORK]*.*; [SAVE ]23MAR93.BCK/SAVE_ SET 
This command saves the highest numbered version of each file in directory 


[PLI.WORK] in a save set named 23MAR93.BCK on the same disk. 


3. $ BACKUP 
_From: [] 
_To: MILO"FRANKIE THISISMINE" : :DUAO: [FRANKIE ]MYDIR.BCK/SAVE SET 
This command saves all files in the current default directory to a network 
save set named MYDIR.BCK on node MILO. 


4, $ MOUNT/FOREIGN DBAO: 
$ BACKUP [SIMS] DBA0:SIMS.BCK/SAVE_SET 


This command saves all files in the directory [SIMS] to a sequential-disk save 
set named SIMS.BCK. 


Input Save-Set Qualifier 


Selects the specified files for processing. 


input-save-set-spec/SELECT=(file-spec],...]) output-specifier 


Description 


Example 


[SINCE 


Format 


Description 


BACKUP 
/SELECT 


If you specify more than one file, separate the file specifications with commas and 
enclose the list in parentheses. Do not use a device specification when you define 
the files to be selected. You can use most standard wildcard characters, but you 
cannot use wildcard characters denoting latest version of files (;) and relative 
versions of files (;-n). 


Note that BACKUP does not apply temporary file specification defaults within 
the list. Each file specification independently takes its defaults from the file 
specification [000000 ... ]*.*;*. 


$ BACKUP DBA1:JUL20.BCK/SAVE_SET/SELECT=[SNOW]BALL.PAS [WINTER.GAME]BALL.PAS 


This command selects a file named [SNOW]BALL.PAS from a sequential-disk 
save set and restores it to the directory [WINTER.GAME] on the current default 
device. 


Input File-Selection Qualifier 
Selects files dated equal to or later than the specified date and time. 


input-specifier/SINCE=time output-specifier 


The /SINCE qualifier selects files by comparing the date and time in the specified 
field of each file header record with the date and time you specify in the command 
line. The following table shows the input file-selection qualifiers you can use with 
/SINCE and their functions. Use only one of these qualifiers at a time in your 
command line. 


Qualifier Function 

/BACKUP Selects files last saved or copied by BACKUP/RECORD since 
the date specified. Also selects files with no BACKUP date. 

/CREATED Selects files created since the date specified. 

/EXPIRED Selects files that have expired since the date specified. 

/MODIFIED Selects files last modified since the date specified. If you 


specify /SINCE without another qualifier, (MODIFIED is 
used by default. 


Specify the date and time as a delta time or as an absolute time using the format 


{[dd-mmm-yyyyl[:]][hh:mm:ss.cc]. You can also use one of the following reserved 
words to specify the date and time: 


7—AG 


BACKUP 
/SINCE 


Example 


BACKUP The BACKUP/RECORD operation (available only on Files—11 
Structure Level 2 volumes) 
TODAY The current day, month, and year at 00:00:00.0 o’clock 


TOMORROW 24 hours after midnight last night 
YESTERDAY 24 hours before midnight last night 


$ BACKUP [PLI.WORK]/SINCE=YESTERDAY/MODIFIED [PLI.SAV] 


This command copies selected files in the directory [PLI.WORK] to the directory 
[PLI.SAV].-Only those files that have been modified since 24 hours preceding 
midnight last night are processed. Even though it is used in this example, the 
/MODIFIED qualifier is not required because its action is the default when the 
/SINCE qualifier is specified. 


/TAPE_EXPIRATION 


Format 


Description 
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Output Save-Set Qualifier 


Writes a file expiration date other than the current date to the file header label of 
the save set. 


input-specifier output-save-set-spec/TAPE_EXPIRATION|[=date] 


When you specify the output save-set qualifier /REWIND during a save operation 
to magnetic tape, BACKUP checks that the expiration date of the first file on the 
tape has expired before initializing the tape. Initializing the tape removes access 
to data previously stored on the tape. 


Digital recommends that you specify an expiration date whenever you create 

a BACKUP save set on magnetic tape using /REWIND. Daily BACKUP tapes 
should expire in seven days, weekly BACKUP tapes should expire in one month, 
and monthly BACKUP tapes should expire in one year. 


Specify the date in the following format: 


dd:mmm:yyyy 
where: 
dd is the date. 


mmm is a 3-letter abbreviation of the month. 
yyyy is the year. 
BACKUP writes the expiration date into the files HDR1 ANSI label on the tape. 


If you do not use the /TAPE_EXPIRATION qualifier, BACKUP uses today’s date 
as the expiration date. 


BACKUP 
/TAPE_EXPIRATION 


Example 
$ BACKUP DBAIL: 
_To: MTAQ: 13SEPBAK.BCK/REWIND/TAPE EXPIRATION=20-SEP-1993/LABEL=SEPW02 
In this example, the save set file 13SEPBAK.BCK receives an expiration date of 
September 20, 1993. Becauses this command includes the /REWIND qualifier, 
13NOVBAK.BCK is the first file on the tape and its expiration date indicates that 
the tape expires after seven days. 

/TRUNCATE 
Command Qualifier 
Controls whether a copy or restore operation truncates a sequential output file at 
the end-of-file (EOF) when creating it. 

Format 


/[NO]JTRUNCATE _input-specifier output-specifier 


Description 


By default, a copy or restore operation uses the allocation of the input file to 
determine the size of the output file. Specify /TRUNCATE if you want the output 
files to be truncated at the end-of-file (EOF). 


Example 


$ DIRECTORY/SIZE [FRANKIE ]ORIGINAL.DAT 
Directory DMAQ: [FRANKIE] 
ORIGINAL. DAT 35 


Total of 1 file, 35 blocks 

$ COPY ORIGINAL.DAT EXTENDED. DAT/ALLOCATION=500 

$ BACKUP [FRANKIE]EXTENDED.DAT MFA0:20JUL.BCK/LABEL=WKLY03 

$ BACKUP/TRUNCATE MFA0:20JUL.BCK/LABEL=WKLY03 DMAO: [ FRANKIE] 


This sequence of commands does the following: 
¢ Determines that the file ORIGINAL.DAT is 35 blocks long. 


¢ Copies ORIGINAL.DAT to EXTENDED.DAT, allocating 500 blocks for 
EXTENDED.DAT. 


e Saves the file EXTENDED.DAT to a save set named 20JUL.BCK on MFAO. 
BACKUP writes the file allocation size in the file header record of the saved 
file but saves only 35 blocks in the save set. 


e Restores the save set file on MFAO to a volume mounted on DMAO and 
truncates the output files at the EOF. The restored file is 35 blocks long. 
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BACKUP 
/VERIFY 


/VERIFY 


Format 


Description 


Example 


Command Qualifier 


Specifies that the contents of the output specifier be compared with the contents 
of the input specifier after a save, restore, or copy operation is completed. 


/VERIFY _ input-specifier output-specifier 


The /VERIFY qualifier is different from the command qualifier /COMPARE. 
Unlike the /VERIFY qualifier, the command qualifier /COMPARE cannot be used 
in a save, restore, copy, or list operation. The /VERIFY qualifier directs BACKUP 
to perform the copy, save, or restore operation first and then to perform the 
compare operation. 


On file-structured copy operations, each file is compared after it is copied. On 
physical copy operations, the volume is compared after it is copied. For a save or 
restore operation, the verification is performed in a separate pass and is preceded 
by the following informational message: 


SBACKUP-I-STARTVERIFY, starting verification pass 


If a file does not compare successfully, BACKUP displays the following error 
message: 


SBACKUP-E-VERIFYERR, verification error for block 'block-number’ 
of ‘disk:[directory]file name.file type;version_ number’ 


The /VERIFY qualifier does not work on a restore or copy operation when the 
/NEW_VERSION output file qualifier is also used. Because the /NEW_VERSION 
qualifier reassigns output file versions, it is not possible to correctly associate the 
created output files with the input files from which they were copied. 


$ BACKUP/VERIFY/LOG *.LIS MFAQ:LIST.BCK 

%BACKUP-S-COPIED, copied DISKSDEFAULT: [WONDER]CRE.LIS;1 
%BACKUP-S-COPIED, copied DISKSDEFAULT: [WONDER]CRETIME.LIS;1 
SBACKUP-S-COPIED, copied DISKS$DEFAULT: [WONDER]EXC.LIS;1 
tBACKUP-S-COPIED, copied DISKSDEFAULT: [WONDER]NOREB.LIS;1 
$BACKUP-S-COPIED, copied DISKS$DEFAULT: [WONDER]REB.LIS;1 
$BACKUP-S-COPIED, copied DISKSDEFAULT: [WONDER]SETREB.LIS;1 
*BACKUP-S-COPIED, copied DISKSDEFAULT: [WONDER]VERS.LIS;1 


%BACKUP-I-STARTVERIFY, starting verification pass 
$BACKUP-S-COMPARED, compared DISKSDEFAULT: [WONDER]CRE.LIS;1 
%BACKUP-S-COMPARED, compared DISKSDEFAULT: [WONDER ]CRETIME.LIS;1 
%BACKUP-S-COMPARED, compared DISKSDEFAULT: [WONDER ]EXC.LIS;1 
%BACKUP-S-COMPARED, compared DISKSDEFAULT: ([WONDER]NOREB.LIS;1 
%BACKUP-S-COMPARED, compared DISKSDEFAULT: [WONDER]REB.LIS;1 
%BACKUP-S-COMPARED, compared DISKSDEFAULT: [WONDER ]SETREB.LIS;1 
%BACKUP-S-COMPARED, compared DISKSDEFAULT: [WONDER]VERS.LIS;1 


This example creates a magnetic tape save set on MFAO and starts the 
verification pass after the save operation is completed. The /LOG qualifier 
displays the file names as they are processed. 


VOLUME 


Format 


Description 


Example 


BACKUP 
/VOLUME 


Command Qualifier 


Indicates that a specific disk volume in a disk volume set is to be processed. The 
/VOLUME qualifier is valid only when used with the /IMAGE qualifier. 


/[IMAGE/VOLUME=n input-specifier output-specifier 


The /VOLUME qualifier allows you to perform an image save, restore, or copy 
operation using one more disk drive than the number of disks in the input volume 
set. When you use /VOLUME, you must write-lock the entire input volume set. 


When you perform an image copy or save operation with the /(VOLUME qualifier, 
all disks in the input volume set must be mounted. Mount the volumes of the 
target volume set one at a time. Enter a separate BACKUP command for each 
disk in the input volume set. A save set created with the /(VOLUME qualifier 
must be restored using the /(VOLUME qualifier. 


You can restore any image save set with the /VOLUME qualifier. All disks in the 
output volume set must be mounted. Mount the disks in the input volume set one 
at a time. You cannot use the command qualifier /NOINITIALIZE in the restore 
operation with the command qualifier /VOLUME. 


In a compare operation that uses the /VOLUME qualifier to compare two disk 
volume sets, all disks in both volume sets must be mounted. In a selected-volume 
compare operation between a save set on tape and a disk volume set, all disks in 
the disk volume set must be mounted. 


$ BACKUP/IMAGE/VOLUME=3 DISK$PUBLIC DRA1: 


This command creates a functionally equivalent copy of the third volume of a 
volume set named DISK$PUBLIC to DRA1. The disk mounted in DRA1 becomes 
the third volume of the image-copy volume set. 
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BACKUP Examples 


Table 7-4 shows BACKUP command formats for save operations and some of 
the qualifiers you can use with a save operation. 


Table 7-4 Save Operation Quick Reference 


Command Action 


Saves a file to a save set on 
magnetic tape 


Saves the most recent 
versions of files in a directory 
to magnetic tape 


Saves a disk volume to a save 
set on magnetic tape 


Saves a disk volume to a 
multivolume save set on more 
than one magnetic tape drive 


Saves a list of files to a save 
set on magnetic tape 


Saves a disk volume for 
incremental backups for the 
first time 


Saves a disk volume for 
incremental backups (not the 
first time) 


Saves an unstructured disk 
volume 


7-64 


Command Format and Example 


BACKUP file-spec save-set-specifier/LABEL=label 
$ BACKUP STRATDAT1.DAT MTAO:STRATDAT1.BCK 
/LABEL=TAPE01 


BACKUP [directory]*.*; save-set-specifier/LABEL=label 
$ BACKUP [LYKINS...]*.*; MTA0:1409MAR17.BCK 
/LABEL=WKY102 


BACKUP/IMAGE ddcu: save-set-specifier/(LABEL=label 
$ BACKUP/IMAGE DBA1: MTA0:930FEB4.BCK 
/LABEL=MTH101 


BACKUP/IMAGE ddcu: save-set-specifier,ddcu: ... 
/LABEL=(labell, ... ) 

$ BACKUP/IMAGE DBA1: MTA0:17MAR.BCK,MTA1:;/ - 
_$ LABEL=(WKY101,WKY102) 


BACKUP file-spec,file-spec,... save-set-specifier/LABEL=label 
$ BACKUP DBA1:[LYKINS...]*.PAS,DMA0:[DAKOTA...]*.PAS - 
_$ MTAO0:PAS17MAR.BCK/LABEL=TAPE01 


BACKUP/RECORD/IMAGE/LOG ddcu: save-set-specifier 
/LABEL=label  - 

$ BACKUP/RECORD/IMAGE/LOG DBA1: MTA0:925FEB4.BCK 
Ps 

_$ LABEL=DLY101 


BACKUP/RECORD/FAST/LOG ddcu:[*.../SINCE=BACKUP 
save-set-specifier/LABEL=label 

$ BACKUP/RECORD/FAST/LOG DBA1)[*...//SINCE=BACKUP - 
_$ MTA0:928FEB4.BCK/LABEL=DLY101 


BACKUP/PHYSICAL ddcu: save-set-specifier/LABEL=label 
$ BACKUP/PHYSICAL DMA1: MTA0:935FEB4.BCK 
/LABEL=MTH101 


(continued on next page) 


BACKUP Examples 


Table 7—4 (Cont.) Save Operation Quick Reference 


Command Action 


Saves a directory to a save 
set on a Files—11 disk 


Saves a directory tree to a 
save set on magnetic tape 


Saves a directory tree to a 
save set on magnetic tape 
and creates a listing file 


Saves a directory tree to a 
save set on magnetic tape 
using data compaction to 
increase the amount of data 
stored on a tape cartridge 


Command Format and Example 


BACKUP [directory] save-set-specifier/SAVE_SET 
$ BACKUP [LYKINS] DBA2:[BACKUP]1609FEB3.BCK/SAVE_ 
SET 


BACKUP [directory...] save-set-specifier/LABEL=label 
$ BACKUP [LYKINS...] MTA0:1612FEB3.BCK/LABEL=TAPE01 


BACKUP/LIST=file-spec [directory...] save-set-specifier 
/LABEL=label 

$ BACKUP/LIST=8SEP.LOG [LYKINS...] MTA0:8SEP.BCK 
/LABEL=WKL101 


BACKUP l[directory...] save-set-specifier/MEDIA_ 
FORMAT=COMPACTION 

$ BACKUP [TESTFILES...]*.*;* MUAO:TEST.SAV/MEDIA_ 
FORMAT=COMPACTION/REWIND 


Table 7-5 shows BACKUP command formats for restore operations and some 
of the qualifiers you can use with restore operations. In the examples in this 
table, it is assumed that save sets already exist on the magnetic tape and 


disk. 


Table 7-5 Restore Operation Quick Reference 


Command Action 


Restores from save set on 
disk to Files—11 disk with 
original UICs 


Restores from a save set on 
magnetic tape to a Files—11 
disk with original UICs 


Restores a selected file in a 
save set on magnetic tape to 
a Files—11 disk 


Command Format and Example 


BACKUP save-set-specifier/SAVE_SET ddcu:[*...//BY_ 
OWNER=ORIGINAL 

$ BACKUP DBA2:[BACKUP]FEB2.BCK/SAVE_SET DBA1)[*...]- 
_$/BY_OWNER=ORIGINAL 


BACKUP save-set-specifier ddcu:[*.../BY_OWNER=ORIGINAL 
$ BACKUP MTA0:1618FEB2.BCK DBA1/;[*...]/BY_ 
OWNER=ORIGINAL 


BACKUP save-set-specifier/SELECT=file-spec file-spec 
$ BACKUP MTAO:FEB2.BCK/SELECT=[POUDRE]UPLIFT.PAS 


_$ DBA1:[GEO.PAS]UPLIFT.PAS 


(continued on next page) 
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BACKUP Examples 


Table 7-5 (Cont.) Restore Operation Quick Reference 


Command Action 


Restores files with a specific 
UIC to a Files—11 disk 


Restores files to a Files—11 
disk with a new UIC 


Restores files to a Files—11 
disk; if file exists, creates 
new version 


Restores files to a Files—11 
disk; if file exists, replaces 
with new version 


Restores files to a Files—11 
disk selecting certain files 


Restores a directory tree, 
placing files in a different 
subtree 


Restores a Files—11 volume 
from a physical save set 


Restores a Files—11 volume 
from an image save set 


Restores a Files—11 volume, 


maintaining the initialization 


parameters specified in the 
DCL command INITIALIZE 


Command Format and Example 


BACKUP save-set-specifier/BY_OWNER=[uic] file-spec 
$ BACKUP MTA0:1641FEB2.BCK/BY_OWNER=[360,052] - 
_$ DBA1:[LYKINS...] 


BACKUP save-set-specifier file-spec/BY_OWNER=[uic] 
$ BACKUP MTA0:1641FEB2.BCK - 
_$ DBA1:[TESTS...]//BY_OWNER=[100,150] 


BACKUP save-set-specifier file-spec/NEW_VERSION 
$ BACKUP MTA0:1641FEB2.BCK DBA1:[LYKINS...)//NEW_ 
VERSION 


BACKUP save-set-specifier file-spec/REPLACE 
$ BACKUP MTA0:1641FEB2.BCK DBA1:[LYKINS.../REPLACE 


BACKUP save-set-specifier/SELECT=file-spec file-spec 
$ BACKUP MTA0:1641FEB2.BCK/SELECT=[LYKINS.PAS] - 
_$ DBA1:[LYKINS...] 


BACKUP save-set-specifier/SELECT=[directory...] [directory2...] 
$ BACKUP MTA0:1641FEB2.BCK/SELECT=[FIELD...] - 
_$ DBA1:[LYKINS.NEWDATA...] 


BACKUP/PHYSICAL save-set-specifier ddcu: 
$ BACKUP/PHYSICAL MTA0:26MAR.BCK DMAS3: 


BACKUP/IMAGE save-set-specifier ddcu: 
$ BACKUP/IMAGE MTA0:17AUG.BCK DRAS: 


INITIALIZE ddcu: volume-name/new-parameters 
MOUNT/FOREIGN ddcu: 

BACKUP/IMAGE save-set-specifier ddcu:/NOINITIALIZE 

$ INITIALIZE DBA1: UTTLPACK/CLUSTER=5 

$ MOUNT/FOREIGN DBA1: 

$ BACKUP/IMAGE MTA0:17AUG.BCK DBA1:/NOINITIALIZE 


Table 7-6 shows BACKUP command formats for copy operations, including 
some of the qualifiers you can use with a copy operation. 
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BACKUP Examples 


Table 7-6 Copy Operation Quick Reference 


Command Action 


Copies a directory tree to 
another directory tree 


Copies a file to another file 


Copies a disk volume to 
another disk volume 


Copies a disk volume to 
another disk volume using 
the /PHYSICAL qualifier 


Copies two disk volume sets 
using the /IMAGE qualifier 


Command Format and Example 


BACKUP [directory...] [directory...] 
$ BACKUP [DAKOTA...] [SUNDANCE...] 


BACKUP file-spec file-spec 
$ BACKUP LOGIN.COM [.SAVEJOLDLOGIN.COM 


BACKUP/IMAGE ddcu: ddcu: 
$ BACKUP/IMAGE DBAI1: DBA2: 


BACKUP/PHYSICAL ddcu: ddcu: 
$ BACKUP/PHYSICAL DYA1: DYA2: 


BACKUP/IMAGE volume-set-name ddcu:,ddcu: 
$ BACKUP/AIMAGE USER$: DBA1:,DBAQ2: 


Table 7-7 shows BACKUP command formats for compare operations, 
including some of the qualifiers you can use with a compare operation. 


Table 7-7 Compare Operation Quick Reference 


Command Action 


Compares two Files—11 files 


Compares a selected file from 
a save set and a Files—11 file 


Compares an image save set 
and Files—11 files 


Command Format and Example 


BACKUP/COMPARE file-spec file-spec 
$ BACKUP/COMPARE UPLIFT.EXE;3 UPLIFT.EXE;2 


BACKUP/COMPARE save-set-specifier/select=file-spec file-spec 
$ BACKUP/COMPARE MTA0:FEB2.BCK 
/SELECT=[POUDRE]UPLIFT.PAS - 

_$ UPLIFT.PAS 


BACKUP/COMPARE/IMAGE save-set-specifier ddcu: 
$ BACKUP/COMPARE/IMAGE MTA0:120CT.BCK DRAS3: 


Table 7-8 shows BACKUP command formats for a list operation, including 
some of the qualifiers you can use with a list operation. 
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BACKUP Examples 


Table 7-8 List Operation Quick Reference 


Command Action 


Lists the files in a save set at 
the terminal 


Lists the files in a save set, 
writes to a file 


Lists the files in a save set in 
full format 


Lists selected files in a 
journal file 
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Command Format and Example 


BACKUPILIST save-set-specifier 
$ BACKUP/LIST MTA0:1618FEB2.BCK 


BACKUP/LIST=file-spec save-set-specifier 
$ BACKUP/LIST=NEWLIST.LIS MTA0:1618FEB2.BCK 


BACKUP/LIST/FULL save-set-specifier 
$ BACKUP/LIST/FULL MTA0:1618FEB2.BCK 


BACKUP/LIST/JOURNAL=journal-name/selection-qualifiers 
$ BACKUP/LIST/JOURNAL=SYS$MANAGER:INCBACKUP - 
_$ /SELECT=[LYKINS.WORK...]/SINCE=1-JAN-1993 
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Crash Log Utility Extractor (CLUE) (VAX Only) 





CLUE Description 


<> 


The Crash Log Utility Extractor (CLUE) is a tool available on VAX systems that 
you can use to display the contents of a crash history file. The crash history 
file, which is created and updated by CLUE, contains key parameters from crash 
dump files. Unlike crash dumps, which are overwritten with each system failure 
(crash) and are therefore typically available only for the most recent failure, the 
crash history file is a permanent record of system failures. By examining the 
contents of the crash history file with the CLUE/DISPLAY command, you can 
understand and resolve the issues responsible for some crashes and you can also 
obtain other useful data. 
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CLUE Usage Summary 


Format 


When a system fails, physical memory is copied to the crash dump file, 
and CLUE automatically appends the relevant parameters to a file named 
CLUE$OUTPUT:CLUE$HISTORY.DATA. You can use CLUE to display and 
examine the data in this file. 


CLUE /DISPLAY 


Parameters 
None. 


Usage Summary 
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Before you run CLUE, define the CLUE command (either interactively or in a 
procedure such as a login command procedure), as follows: 


$ CLUE :== $CLUE 


To invoke CLUE, enter the CLUE/DISPLAY command. To terminate CLUE, enter 
the EXIT command at the CLUE_DISPLAY> prompt or press Ctrl/Z. 


Note that you can also issue CLUE/DISPLAY commands directly from DCL, as in 
the following example: 


$ CLUE/DISPLAY = DIR/TYPE=INVEXCEPTN/SINCE=21-NOV-1994/OUT=CLUE.LIS 


CLUE (VAX Only) 


CLUE Commands 


DELETE 


Format 


Parameter 


Description 


Example 


This section describes and provides examples of the CLUE /DISPLAY commands. 
You can abbreviate any command, keyword, or qualifier as long as the 
abbreviation is not ambiguous. The asterisk and the percent sign can be used as 
wildcard characters in the specification of user names, node names, and UICs. 


Table 8-1 lists the commands described in this section. 


Table 8-1 CLUE Commands 


Command Description 

DELETE Deletes an entry from the crash history file 

DIRECTORY Displays a list of entries from the crash history file 

EXIT Exits from CLUE 

EXTRACT Extracts data from an entry in the crash history file to a file 
HELP Provides online help for CLUE/DISPLAY commands 

SHOW Displays specific information for an entry in the crash history file 


Deletes an entry from the list and writes the remaining entries to a binary file. 
DELETE n 


n : 
The number of the entry that you want to delete from the crash history file. The 
number of the entry corresponds to the entry number shown by the DIRECTORY 
command. 


Entries in the CLUE.BIN file can be permanently removed using the DELETE 
command. This command deletes the specified entry and writes the remaining 
entries to an output file. When an entry is deleted from the crash history file, a 
new history file (with a higher version number) is created. 


CLUE DISPLAY> DELETE 4 
Deletes the fourth entry in the list. 


CLUE (VAX Only) 
DIRECTORY 


DIRECTORY 


Displays a brief summary of each entry in crash history file. 


Format 
DIRECTORY 


Qualifiers 


/MODULE= 
Lists all failures that correspond to the specified module (that is, failures that 
start with the specified string). 


/OFFSET= 
Lists all failures that correspond to the specified offset (that is, failures that start 
with the specified string). 


/ISINCE= 

Lists all failures that have occurred since the specified date. If the /SINCE 
qualifier is used and no date is specified, all failures that have occurred on the 
current day are listed. 


/TYPE= 
Lists all failures that correspond to the specified type (that is, failures that start 
with the specified string). . 


Description 


The DIRECTORY command lists the record entries in the crash history file, 
beginning with the most recent entry. Six headings are displayed for each entry: 


e Entry number 


e Date and time of crash 


° Type 

e Process 
¢ Module 
e Offset 


You can use one or more qualifiers for the DIRECTORY command to limit the 
crash entries that are displayed. You can also use more than one qualifier in the 
same command line. For example, the command DIRECTORY/SINCE=18-APR- 
1993/MODULE=NETACP lists only those crash entries that have taken place 
since April 18, 1993, and for which the module is NETACP. 
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Examples 


EXIT 


Format 


Description 


Example 


EXTRACT 


Format 


Parameter 


CLUE (VAX Only) 


DIRECTORY 
1. CLUE DISPLAY> DIRECTORY 
# Time Type Process name Module Offset 
1 11-JUL-1994 09:07:45.78 INVEXCEPTIN batman NETACP 14B9 
2 OQ1-JAN-1994 11:32:55.23 SSRVEXCEPT startrek SYSLOA 10A8 
3. 15-MAY-1993 07:26:12.34 BADFID evolushun NONE NONE 
4 22-APR-1993 10:45:20.60 INVEXCEPTN aprocess IOBUF 015D 
This example lists all entries in the crash history file. 
2. CLUE DISPLAY> DIRECTORY /MODULE=SYSLOA 
# Time Type Process name Module Offset 
2 Q1-JAN-1994 11:32:55.23 SSRVEXCEPT startrek SYSLOA 10A8 


This example lists only those entries for which the module is SYSLOA. 


Exits from CLUE. 


EXIT 


This command exits from CLUE and returns you to the DCL level. 


CLUE _DISPLAY> EXIT 
$ 


This example exits from CLUE. 


Extracts all of the data from an entry in the crash history file to either an ASCII 
or a binary file. 


EXTRACT n 


n 
The number of the entry that you want to extract to a file. The number of the 
entry corresponds to the entry number shown by the DIRECTORY command. 


CLUE (VAX Only) 


EXTRACT 


Qualifiers 


Description 


Example 


HELP 


Format 


Parameter 


Example 


SHOW 


Format 
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/BINARY=filename.bin 
The /BINARY qualifier writes the output to a binary file. 


/OUTPUT=filename.txt 
The /OUTPUT qualifier writes the output to an ASCII file. The /OUTPUT 
qualifier is the default. 


Use the EXTRACT command to save record entries from the crash history file to 
an ASCII or a binary file. If no qualifier is used, entry is written to a text file 
with the name CLUE$HISTORY.TXT. 


CLUE _DISPLAY> EXTRACT 3 /OUTPUT=15MAYCRASH. TXT 


This command writes the data from entry number 3 in the crash history file to an 
ASCII file named 15MAYCRASH.TXT. 


Provides online help for CLUE commands. 


HELP [command] 


command 
The command for which you want help. 


CLUE DISPLAY> HELP DIRECTORY 
This command provides online help for the DIRECTORY command in CLUE. 


Displays specific information for an entry in the crash history file. 


SHOW _einfo_type n 


Parameters 


Description 


Examples 


CLUE (VAX Only) 
SHOW 


info_type 
You must choose one of the following information types: 


¢ CRASH—displays information similar to the SHOW CRASH command in the 
System Dump Analyzer (SDA) utility. 


e STACK—displays information similar to the SHOW STACK command in 
SDA. 


¢ EXEC—displays information similar to the SHOW EXEC and SHOW 
DEVICE commands in SDA. 


e ISTREAM—displays the instruction stream around the failing PC. 


e SUMMARY—displays the active processes on the system, similar to the 
SHOW SUMMARY/IMAGE command in SDA. 


e ALL—displays all the information from the preceding types. 


For more information about SDA commands, see the OpenVMS VAX System 
Dump Analyzer Utility Manual. 


n 

The number of the entry for which you want to display information. The 
number of the entry corresponds to the entry number shown by the DIRECTORY 
command. 


This command lets you see all the data associated with a particular failure. This 
information is split into several sections; you can choose to see either individual 
sections or all of the information. 


If the crash number is not specified, information for the most recent entry in the 
crash history file is displayed. You must, however, specify one of the keywords for 


info_type. 

If you request a specific entry from the crash history list (using the SHOW n 
command), the display will include some parameters that are useful only to 
Digital Services. 


1, CLUE _DISPLAY> SHOW ISTREAM 4 
Instructions around the failing PC: 


80A9F841 RSB 

80A9F842 BUG CHECK #019C 
80A9F846 BUG CHECK #019C 
80A9F84A PUSHL 4 
B0A9F84C MOVL = RS, R4 
80A9F84F BEQL 00002C88 
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CLUE (VAX Only) 


SH 


8-10 


OW 


80A9F851 JSB 
80A9F857 MOVL 
80A9F85A RSB 
80A9F85B BUG CHECK #019C 


@#-7FFFCC48 
(SP)+,R4 


PC->80A9F85F BUG CHECK #019C => CLUSTRLOA + 09B6F 


80A9F863 MOVL #00,R1 
80A9F866 MOVB #01,R0 
80A9F869 RSB 

80A9F86A INCL 00002301 
80A9F86E TSTW 000022FF 
80A9F872 BLSS 00002CA5 


This example displays instruction stream information around the failing PC 
from the crash history file for entry number 4. 


CLUE _DISPLAY> SHOW CRASH 4 


Time of system crash: 
Version of system: 


System Version Major ID/Minor ID: 


VAXcluster node: 
Crash CPU ID/Primary CPU ID: 


Bitmask of CPUs active/available: 


CPU bugcheck codes: 


Current Process name: 
Current IPL: 
CPU database address: 


General registers: 


RO = 80A9F85B R1 = 00000002 
R4 = 80A15AD0 R5 = 00000000 
R8 = 00022520 RI = 00020F18 


21-MAR-1993 15:21:33.72 
VAX/VMS VERSION V5.5 


1/0 

HERMES, a VAX 6000-420 

03/01 

0000000A/0000000A 

CPU 03 INCONSTATE 

1 other CPUEXIT 

OPCOM 

8 

801AA000 

R2 = 80A15B08 R3 = 00010008 
R6 = 00000001 R7 = 00000042 
R10 = 00021000 R11 = 00020ECO 


This example displays information about the state of the system at the time 
of the failure. The actual output from this command may contain significantly 
more information than is shown in this example. ¢ 
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Error Log Utility 


ERROR LOG Description 


The Error Log utility (ERROR LOG) is a system management tool that selectively 
reports the contents of one or more error log files. The operating system 


automatically writes messages to the latest version of an error log file named 
SYS$ERRORLOG:ERRLOG.SYS as the following events occur: 


e Errors—Device errors, device timeouts, machine checks, bus errors, memory 
errors (hard or soft error correcting code (ECC) errors), asynchronous write 
errors, undefined interrupts, and bugchecks 


¢ Volume changes—Volume mounts and dismounts 


e System events—Cold startups, warm startups, system failure (crash) 
startups, messages from the Send Message to Error Logger (6SNDERR) 
system 


You can use ERROR LOG with most system-supported hardware, such as 
adapters, disks, tapes, CPUs, and memories, but not all communications devices 
(for example, the DEQNA). Some synchronous communications devices are 
supported. 
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ERROR LOG Usage Summary 


Format 


You can use ERROR LOG to process one or more types of error log entries for 
inclusion in a report. ERROR LOG generates six types of optional formatted 
output: full (default), brief, summary, register dump of device entries, binary copy 
of selected entries, and binary copy of rejected entries. 


The Error Log utility (ERROR LOG) selectively reports the contents of an error 
log file. 


ANALYZE/ERROR_LOG _[/qualifier(s)] [file-specf,...]] 


Parameters 
/qualifier(s) 
The function to be performed by the ANALYZE/ERROR_LOG command. 


file-spec{....] 

Specifies one or more files that contain binary error information to be 
interpreted for the error log report. You can include wildcard characters 

in the file specification. If you omit the file specification, the default file is 
SYS$ERRORLOG:ERRLOG.SYS (see the OpenVMS System Manager’s Manual 
for information on maintaining this file). 


See the OpenVMS User’s Manual for details on file specifications. 


Usage Summary 
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To invoke ERROR LOG, enter the following DCL command: 
ANALYZE/ERROR_LOG [/qualifier(s)] [file-spec][,...] 


ERROR LOG does not prompt you. To exit from ERROR LOG, press Ctrl/C. You 
also exit the utility when end-of-file (EOF) is detected. To direct output, use the 
/OUTPUT, /BINARY, and /REJECTED qualifiers with the ANALYZE/ERROR_ 
LOG command. 


You must have SYSPRV privilege to run ERROR LOG; however, only read access 
is required to access the file ERRORLOG.SYS. (It is not necessary to rename the 
file ERRORLOG.SYS to ERRORLOG.OLD before using ERROR LOG.) Do not use 
the /BINARY qualifier with the /FULL, /BRIEF, /OUTPUT, /REGISTER_DUMP, 
or /SUMMARY qualifiers. 


ERROR LOG Qualifiers 


The qualifiers for the ANALYZE/ERROR_LOG command are described in this 
section. Table 9-1 lists the qualifiers as follows: 


Table 9-1 ERROR LOG Qualifiers 


Qualifier 
/BEFORE 


/BINARY 


/BRIEF 
/ENTRY 


/EXCLUDE 


/FULL 


/INCLUDE 


/LOG 


/NODE 


/OUTPUT 


/REGISTER_DUMP 


/REJECTED 


/SID_REGISTER 


/SINCE 


/STATISTICS 
/SUMMARY 


Description 
Specifies that only those entries dated earlier than the stated 
date and time are to be selected for the error report 


Controls whether the binary error log records are converted to 
ASCII text or copied to the specified output file 


Generates a brief report 


Generates an error log report that includes the specified entry 
range or starts at the specified entry number 


Excludes errors generated by the specified device class, device 
name, or error log entry type from the error log report 


Generates a full report (default), which provides all available 
information for an error log entry 


Includes errors generated by the specified device class, device 
name, or error log entry type in the error log report 


Controls whether informational messages that specify the 
number of entries selected and rejected for each input file are 
sent to SYSSOUTPUT 


Generates a report consisting of error log entries for specific 
nodes in a VAXcluster system 


Specifies the output file for the error log report 


Used in conjunction with the INCLUDE qualifier to generate, 
in a hexadecimal longword format, a report that consists of 
device register information 


Allows you to specify the name of a file that will contain binary 
records for rejected entries 


Generates a report consisting of error log entries that occurred 


on the specified CPU (VAX only) 


Specifies that only those entries dated later than the stated 
date and time are to be selected for the report 


Generates run-time statistical information 


Generates an error log report that consists of a statistical 
summary (VAX only) 
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ERROR LOG 


/BEFORE 


/BEFORE 


Format 


Parameter 


Description 


Example 


/BINARY 


Format 


Parameter 


Description 
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Specifies that only those entries dated earlier than the stated date and time are 
to be selected for the error report. 


/BEFORE [=date-time] 


date-time 
Limits the error report to those entries dated earlier than the specified time. 


You can specify an absolute time, a delta time, or a combination of absolute and 
delta times. See the OpenVMS User’s Manual for details on specifying times. 


If you omit the /BEFORE qualifier or specify /BEFORE without a date or time, 
all entries are processed. 


$ ANALYZE/ERROR_LOG/BEFORE=19-APR-1994:10:00 ERRLOG.OLD;5 


In this example, the error log report generated for ERRLOG.OLD;5 contains 
entries that were logged before 10:00 A.M. on April 19, 1994. 


Controls whether the binary error log records are converted to ASCII text or 
copied to the specified output file. 


/BINARY | [=file-spec] 
/NOBINARY 


file-spec 
Specifies the output file selected to contain image copies of the input records. 


The /BINARY qualifier creates a binary file that contains copies of the original 
binary error log entry if the command line also specifies an interval (/SINCE, 
/BEFOREH, or /ENTRY qualifier) or a filter (INCLUDE or /EXCLUDE qualifier). 
If no interval or filter is specified, all error log entries are copied. 


Example 


/BRIEF 


Format 


Description 


Example 


/ENTRY 


Format 


Parameter 


ERROR LOG 
/BINARY 


If you specify /BINARY=file-spec, the selected output file contains image copies of 
the binary input records (the records are not translated to ASCII). If you omit the 
device or directory specification, the current device and the default directory are 
used. If you omit the file name, the file name of the input file is used. If you omit 
the file type, the default file type is .DAT. 


Do not use /BINARY with the /FULL, /BRIEF, /OUTPUT, /REGISTER_DUMP, 
or /SUMMARY qualifiers. These qualifiers generate an ASCII report; /BINARY 
generates a binary file. 


$ ANALYZE/ERROR_LOG/INCLUDE=DBA1/BINARY=DBA1 ERR.DAT 
ERRLOG.OLD;5 


In this example, the output file DBA1_ERR.DAT contains image copies of the 
entries that apply to DBA1. 


Generates a brief report. 


/BRIEF 


Do not use /BRIEF with the /BINARY qualifier. 


The Example section shows the format of a typical brief error log report. 


$ ANALYZE/ERROR LOG/BRIEF ERRLOG.OLD;97 


In this example, the error log report generated from ERRLOG.OLD;97 contains 
minimal information. 


Generates an error log report that includes the specified entry range or starts at 
the specified entry number. 


/ENTRY  [=(START:decimal-value[, END:decimal-value])] 


(START: decimal-value[,END:decimal-value]) 
Specifies the range of entries to be included in the error log report. 


ERROR LOG 


/ENTRY 


Description 


Example 


/EXCLUDE 


Format 


Parameters 
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If you specify /ENTRY without the entry range or omit the qualifier, the entry 
range defaults to START:1,END:end-of-file. 


$ ANALYZE/ERROR_LOG/ENTRY=(START:1,END:18) ERRLOG.SYS 


In this example, the entry range for the error log report generated from file 
ERRLOG.SYS is limited to entry numbers 1 to 18. 


Excludes errors generated by the specified device class, device name, or error log 
entry type from the error log report. 


device-class 
[,.--]) 
entry-type 


/EXCLUDE=( device-name 


device-class 

device-name 

entry-type 

Specifies one or more keywords denoting the device class, device name, or 
error log entry type. If you specify more than one keyword, you must specify a 
comma-separated list of values that is enclosed in parentheses. 


Device Class Keywords 


ADAPTER 

BUSES 

CACHE 

DISKS 
INFORMATIONAL 
LINE_PRINTER 
REALTIME 
SYNC_COMMUNICATIONS 
TAPES 

VECTOR 
WORKSTATION 


Examples of Device Name Constructs 


DB Group of devices 

DBA1 Specific device/unit number 
(DBA1,HSC1$DUA1,DYA0) List of devices 

(DB,DR,XF) List of device groups 


Entry-Type Keywords 
ATTENTIONS 
BUGCHECKS 
CONFIGURATION 


CONTROL_ENTRIES 


CPU_ENTRIES 


DEVICE_ERRORS 


ENVIRONMENTAL_ 
ENTRIES 


MACHINE_CHECKS 
MEMORY 
SNAPSHOT_ENTRIES 
SYNDROME 


TIMEOUTS 
UNKNOWN_ENTRIES 
UNSOLICITED_MSCP 


VOLUME_CHANGES 


ERROR LOG 
/EXCLUDE 


Exclude device attention entries from the report. 


Exclude all types of bugcheck entries from the 
report. 


Exclude system configuration entries from the 
report. 


Exclude control entries from the report. Control 
entries include the following entry types: 

e System power failure restarts 

e Time stamps 

e System startups 


e $SNDERR messages (system service to send 
messages to error log) 


¢ Operator messages 
e Network messages 


e ERRLOG.SYS created 


Exclude CPU-related entries from the report. 
CPU entries include the following entry types: 


e SBI alerts/faults 

e Undefined interrupts 

¢ MBA/UBA adapter errors 
e Asynchronous write errors 


e UBA errors 


Exclude device error entries from the report. 
Exclude environmental entries from the report. 


Exclude machine check entries from the report. 
Exclude memory errors from the report. 
Exclude snapshot entries from the report. 
Exclude console-generated entries that describe a 
symptom set used by Digital Services personnel 
to identify problems. 

Exclude device timeout entries from the report. 
Exclude any entry that had either an unknown 
entry type or an unknown device type or class. 
Exclude unsolicited MSCP entries from the 
output report. 

Exclude volume mount and dismount entries 
from the report. 


ERROR LOG 


/EXCLUDE 


Description 


Examples 
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You can specify one or more devices by device class, device name, or one or more 
keywords that identify entry types. 


Unless you specify the UNKNOWN_ENTRIES keyword to explicitly exclude from 
a report any entries from unsupported (unknown) devices, any unknown device is 
reported. 


Any known information for the entry is translated; the remaining information is 
output in hexadecimal longwords. 


If you specify a device class keyword or a device name construct with both the 
AINNCLUDE and /EXCLUDE qualifiers, the INCLUDE qualifier takes precedence. 


The BUSES keyword also excludes error log entries for the BI bus. The DEVICE 
ERRORS keyword also excludes entries for the BI adapter. 


1. § ANALYZE/ERROR_LOG/EXCLUDE=MTA0 
In this example, the error log entries for the device MTAO are excluded from 
the error log report for the file ERRLOG.SYS. 

2, $ ANALYZE/ERROR_LOG/EXCLUDE=(MTAQ,DRAS) ERRLOG.OLD 
In this example, the devices MTAO and DRAS5 are excluded from the error log 
report for the file ERRLOG.OLD. 

3. § ANALYZE/ERROR_LOG/EXCLUDE= (DISKS , BUGCHECKS ) 
In this example, all disk devices and all bugcheck entries are excluded from 
the error log report for the file ERRLOG.SYS. 

4, § ANALYZE/ERROR_LOG/EXCLUDE=TAPES / INCLUDE=MTA0 
In this example, the device MTAO is included in the error log report for the 
file ERRLOG.SYS. All other magnetic tape devices are excluded from the 
report. 

5. § ANALYZE/ERROR_LOG/EXCLUDE=(DISK, VOLUME CHANGES) 
In this example, entries for disk volume information are excluded from the 
error log report for the file ERRLOG.SYS. 

6. § ANALYZE/ERROR_LOG/EXCLUDE= (DISK, VOLUME_CHANGES , DEVICE_ERROR) 


In this example, entries for volume and device error information on disks are 
excluded from the error log report for the file ERRLOG.SYS. 


$ 
ANALYZE/ERROR_LOG/EXCLUDE= (DISK, VOLUME CHANGES, DEVICE ERROR, BUGCHECK) 


In this example, entries for volume and device error information on disks, 
and bugcheck errors are excluded from the error log report for the file 
ERRLOG.SYS. 


/FULL 


Format 


Description 


Examples 


INCLUDE 


Format 


Parameters 


ERROR LOG 
/FULL 


Generates a full report, which provides all available information for an error log 
entry. This is the default report format. 


/(NO]FULL 


Do not use /FULL with the /BINARY qualifier. 


1. $ ANALYZE/ERROR_LOG/FULL ERRLOG.OLD;72 


The command in this example produces a full report. 


D5 ig ANALYZE/ERROR_LOG ERRLOG.OLD; 72 


The command in this example produces a full report. The default report type 
is /FULL,; it is not necessary to specify it in the command line. 


Includes errors generated by the specified device class, device name, or error log 
entry type in the error log report. 


device-class 
/INCLUDE=( <¢ device-name [,..-]) 
entry-type 


device-class 

device-name 

entry-type 

Specifies one or more keywords denoting the device class, device name, or entry 
type. If you specify more than one keyword, you must specify a comma-separated 
list of values that is enclosed in parentheses. 


Device Class Keywords 


ADAPTER 

BUSES 

CACHE 

DISKS 

INFORMATIONAL 
LINE_PRINTER 
REALTIME 
SYNC_COMMUNICATIONS 
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ERROR LOG 


ANCLUDE 
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TAPES 
VECTOR 
WORKSTATION 


Examples of Device Name Constructs 


DB 
DBA1 


(DBA1,HSC1$DUA1,DYA0) 


(DB,DR,XF) 
Entry-Type Keywords 


ATTENTIONS 
BUGCHECKS 
CONFIGURATION 


CONTROL_ENTRIES 


CPU_ENTRIES 


DEVICE_ERRORS 


ENVIRONMENTAL_ 
ENTRIES 


MACHINE_CHECKS 
MEMORY 
SNAPSHOT_ENTRIES 
SYNDROME 


TIMEOUTS 


Group of devices 

Specific device/unit number 
List of devices 

List of device groups 


Include device attention entries in the report. 
Include all types of bugcheck errors in the report. 


Include system configuration entries in the 
report. 


Include control entries in the report. Control 
entries include the following entry types: 


e System power failure restarts 
e Time stamps 
e System startups 


e $SNDERR messages (system service to send 
messages to error log) 


¢ Operator messages 

¢ Network messages 

e ERRLOG.SYS created 

Include CPU-related entries in the report. CPU 
entries include the following entry types: 

e SBI alerts/faults 

¢ Undefined interrupts 

¢ MBA/UBA adapter errors 

e Asynchronous write errors 

¢ UBA errors 


Include device errors in the report. 
Include environmental entries in the report. 


Include machine check errors in the report. 
Include memory errors in the report. 
Include snapshot entries in the report. 


Include console-generated entries that describe a 
symptom set used by Digital Services personnel 
to identify problems. 


Include device timeout errors in the report. 


Description 


Examples 


ERROR LOG 


ANCLUDE 
UNKNOWN_ENTRIES Include any entry that had either an unknown 
entry type or an unknown device type or class. 
UNSOLICITED_MSCP Include unsolicited MSCP entries in the output 
report. 
VOLUME_CHANGES Include volume mount and dismount entries in 
the report. 


You can specify one or more devices by device class, device name, or one or more 
keywords that identify entry types. 


Use the UNKNOWN_ENTRIES keyword to obtain a report that contains the 
contents of the device registers logged by unsupported devices. 


Any known information for the entry is translated; the remaining information is 
output in hexadecimal longwords. 


If you specify a device class keyword or a device name construct with both the 
/INCLUDE and /EXCLUDE qualifiers, the INCLUDE qualifier takes precedence. 


The BUSES keyword also includes error log entries for the BI bus. The DEVICE_ 
ERRORS keyword also includes entries for the BI adapter. 


1. 3s ANALYZE/ERROR_LOG/INCLUDE=MTA0 
In this example, the report consists of error log entries for the device MTAO, 
which are in the default error log file ERRLOG.SYS. 

2. § ANALYZE/ERROR_LOG/INCLUDE=MTA0 /EXCLUDE=TAPES 


In this example, the device MTAO is included in the error log report for the 
file ERRLOG.SYS. All other magnetic tape devices are excluded from the 
report. 

3. $ ANALYZE/ERROR_LOG/INCLUDE=(MTAO , VOL) 


In this example, the report consists of error log entries and volume mounts 
and dismounts for the device MTAO, which are in the default error log file 
ERRLOG.SYS. 

AX eS ANALYZE/ERROR_LOG/INCLUDE=(DISK, VOLUME CHANGES) 
In this example, the report consists of error log entries for disk volume 
information, which are in the default error log file ERRLOG.SYS. 

5. §$ ANALYZE/ERROR_LOG/INCLUDE=(DISK, VOLUME CHANGES, DEVICE ERROR) 


In this example, the report consists of error log entries for volume and 
device error information on disks, which are in the default error log file 
ERRLOG.SYS. 
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ERROR LOG 


[INCLUDE 


/LOG 


Format 


Example 


/NODE 


Format 


Parameter 


Example 
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$ 
ANALYZE/ERROR_LOG/INCLUDE=(DISK, VOLUME CHANGES, DEVICE ERROR, BUGCHECK) 


In this example, the report consists of error log entries for volume and device 
error information on disks, and bugcheck errors. These entries are in the 
default error log file ERRLOG.SYS. 


Controls whether informational messages that specify the number of entries 
selected and rejected for each input file are sent to SYS$OUTPUT. By default, 
these messages are not displayed. 


/[NO]LOG 


$ ANALYZE/ERROR_LOG/LOG ERRLOG.OLD;5 


In this example, informational messages generated about ERRLOG.OLD;5 are 
sent to SYS$OUTPUT. 


Generates a report consisting of error log entries for specific nodes in a 
VAXcluster system. 


/NODE=(node-namef{,...]) 


node-name 

Specifies the names of one or more VAXcluster members. Names cannot exceed 
six characters. If more than one node name is entered, you must specify a 
comma-separated list of node names that is enclosed in parentheses. 


$ ANALYZE/ERROR_LOG/NODE= (ORANGE, NASSAU) 
SYSS$SYSROOT: [SYS*.SYSERR]ERRLOG.SYS 


In this example, the VAXcluster system consists of members BROOME, NASSAU, 
ORANGE, and PUTNAM. The output contains only those entries that were 
logged for nodes NASSAU and ORANGE. 


/OUTPUT 


Format 


Parameter 


Description 


Example 


ERROR LOG 
/OUTPUT 


Specifies the output file for the error log report. 


/OUTPUT  [=file-spec] 


file-spec 
The output file selected for the error log report. See the OpenVMS User’s Manual 
for details on specifying files. 


If you omit the /OUTPUT qualifier, output is directed to SYS$OUTPUT. If you 
specify /OUTPUT=file-spec, the selected output file contains the error log report. 
If you omit the device or directory specification, the current device and default 
directory are used. If you omit the file name, the file name of the input file is 
used. If you omit the file type, the default file type is .LIS. 


Do not use /OUTPUT with the /BINARY qualifier. 


$ ANALYZE/ERROR_LOG/OUTPUT=ERROR_LOG.LIS ERRLOG.OLD;72 


In this example, the ouput file ERROR_LOG.LIS contains entries generated from 
ERRLOG.OLD;72. 


/REGISTER_DUMP 


Format 


Description 


Used in conjunction with the /INCLUDE qualifier to generate, in a hexadecimal 
longword format, a report that consists of device register information. 


/REGISTER_DUMP 


Use the /REGISTER_DUMP qualifier to get a report that lists the hexadecimal 
contents of the device registers for the device specified by the /INCLUDE qualifier. 
The /INCLUDE qualifier must be used with the /REGISTER_DUMP qualifier. 


The /REGISTER_DUMP qualifier reports register contents for memory, device 
error, and device timeout entries. There is no translation of any of the device 
register information. 


Do not use /REGISTER_DUMP with the /BINARY qualifier. 
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ERROR LOG 
/REGISTER_DUMP 


Example 
$ ANALYZE/ERROR_LOG/INCLUDE=DB/REGISTER DUMP ERRLOG. OLD; 72 
In this example, the output is in the format of a REGISTER_DUMP report 
containing entries that apply only to the DB device. 

/REJECTED 
Allows you to specify the name of a file that will contain binary records for 
rejected entries. 

Format 
/REJECTED § [=file-spec] 

Parameter 


file-spec 
Specifies the name of the file that is to contain the rejected entries. 


Description 


The /REJECTED qualifier creates a binary file that contains copies of the original 
binary error log entry. If the error log entry is rejected because the command 
line also specifies an interval (/SINCE, /BEFORE, or /ENTRY qualifier) or a filter 
(ANCLUDE or /EXCLUDE qualifier), the entry is written to the specified file. 


Rejected entries are those entries that are not translated because they fall into 
one of the following categories: 


e All entries specified with the /EXCLUDE qualifier 
e All entries not specified with the /INCLUDE qualifier 


e Any entry that does not occur within the period specified by the /SINCE and 
/BEFORE qualifiers 


e Any entry that is not in the range of entries specified by the /ENTRY qualifier 


If you specify /REJECTED=file-spec, the output file contains image copies of the 
rejected records. If you omit the device or directory specification, the current 
device and default directory are used. If you omit the file name, the file name of 
the input file is used. If you omit the file type, the default file type is .REJ. 


Example 


$ ANALYZE/ERROR_LOG/INCLUDE=MTA0/REJECTED=REAL_ERRS.DAT 
ERRLOG.OLD;5 


In this example, the output file REAL_ERRS.DAT contains image copies of all 
entries from ERRLOG.OLD;5, with the exception of those entries that apply to 
the MTAO device. 
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ERROR LOG 
/SID_REGISTER (VAX Only) 


/SID_REGISTER (VAX Only) 





Format 


Parameter 


Example 


[SINCE 


Format 


Parameter 


Description 


Example 


On VAX systems, generates a report consisting of error log entries that occurred 
on the specified CPU. 


/SID_REGISTER=(hexadecimal-value{....]) 


hexadecimal-value 

Specifies a value obtained from the system ID register. Use the $GETSYI system 
service to obtain this value, which is unique to each system. The OpenVMS 
System Services Reference Manual describes the $GETSYI system service. 


In a VAXcluster environment, you can specify a hexadecimal value for each 
member. If you specify more than one hexadecimal value, you must specify a 
comma-separated list of values that is enclosed in parentheses. 


$ ANALYZE/ERROR_LOG/SID REGISTER=02006148 ERRLOG.OLD;72 


In this example, the output consists of only those entries that were logged for the 
system with an ID of 02006148 (hexadecimal). ¢ 


Specifies that only those entries dated later than the stated date and time are to 
be selected for the report. 


/SINCE [=date-time] 


date-time 
Limits the error report to those entries dated later than the specified time. 


Only absolute date and time specifications are valid. See the OpenVMS User’s 
Manual for details on specifying times. 


If you omit the /SINCE qualifier, all entries are processed. If you specify /SINCE 
without a date and time, the default is TODAY. 


$ ANALYZE/ERROR_ LOG/SINCE=19-APR-1994:15:00 ERRLOG.OLD;56 


In this example, the error log report generated from ERRLOG.OLD;56 contains 
entries that have been logged since 15:00 on April 19, 1994. 
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ERROR LOG 


[STATISTICS 


[STATISTICS 


Format 


Description 


Example 


Generates run-time statistical information. 


/STATISTICS 


Use the /STATISTICS qualifier to generate a report that consists of the page 
faults, buffered I/O, direct I/O, and CPU time used in the execution of the 
ANALYZE/ERROR_LOG command. 


$ ANALYZE/ERROR_LOG/STATISTICS ERRLOG. OLD; 4 


In this example, the output generated by this command consists of a full report of 
all entries in ERRLOG.OLD;4 and the run-time statistics for the execution of the 
command. 


/SUMMARY (VAX Only) 


<i> 


Format 


Parameters 
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On VAX systems, generates an error log report that consists of a statistical 
summary. 


The Examples section shows the format of several error log summary reports. 


/SUMMARY_ [=summary-type-keyword{....]] 


/NOSUMMARY 

Keywords 

DEVICE Include the device summary section in the report. 

ENTRY Include the summary of entries logged section in the report. 

HISTOGRAM Include the processed entries hour of day histogram in the 
report. 

MEMORY Include the summary of memory errors section in the report. 

VOLUME Include the volume label section in the report. 


Description 


Examples 


ERROR LOG 
/SUMMARY (VAX Only) 


Select the type of summary by specifying one or more keywords. 


Note 


If you specify (SUMMARY without a summary type, the report contains 
all of the preceding summary types listed. If you want only a summary 
report, specify both the /NOFULL and the /SUMMARY qualifiers in the 
command line. 


Do not attempt to correlate the error counts reported by the DCL command 
SHOW ERROR and the /SUMMARY qualifier. A discrepancy in these figures 
could be due to several system events and would be difficult to track. 


If the DEVICE keyword is specified, device entries are correlated with device 
mount information in an attempt to identify the volume that was mounted at 
the time the entry was logged. This correlation helps to determine whether 
errors can be attributed generically to the device or specifically to a given volume. 
However, no correlation can be made under the following conditions: 


e The device is not file-structured. 


e Volume information is not available. Either of the following conditions can 
result in volume information not being available: 


— The device entry is contained in an error log file created after the mount 
information was logged (SYS$ERRORLOG:ERRLOG.SYS was renamed). 


— Volume shadowing is enabled. (Mount information pertains to the virtual 
device, while device entry information pertains to the physical device.) 


In these instances, device entries are charged against a null volume name. 


UCB ERROR COUNT and UCB OPERATION COUNT fields reflect the UCB 
information according to the time of the most recent entry for the given volume. 


Do not use the /BINARY qualifier with /SUMMARY. 


1. $ ANALYZE/ERROR_LOG/SUMMARY ERRLOG.OLD;5 


The output generated by the command in this example includes a full report 
and a summary report of all entries in ERRLOG.OLD;5. 


2. $ ANALYZE/ERROR_LOG/NOFULL/SUMMARY ERRLOG.OLD;5 


The output generated by the command in this example consists of a summary 
report of all entries in ERRLOG.OLD;5. 


3. $ ANALYZE/ERROR_LOG/SUMMARY=(ENTRY , DEVICE) 


The output generated by the command in this example includes the Entry 
and Device sections of the summary report from the default input file 
ERRLOG.SYS. 
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ERROR LOG 
/SUMMARY (VAX Only) 


4. $ ANALYZE/ERROR_LOG/INCLUDE=DBA4/NOFULL/SUMMARY ERRLOG.OLD;5 


The output generated by the command in this example includes the summary 
report. The report contains the entries that apply to the DBA4 device: device 
error, device timeout, and device attention. ¢ 
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ERROR LOG Examples 


ERROR LOG Examples 


Sample Error Log Report 

An error log report entry contains two sections: identification and device- 
dependent data. The identification section consists of the first four lines and 

is generated for all reports. The device-dependent data section, which follows the 
identification section, contains information on the selected error log entries. 


The first line of the identification section gives the error entry number. This 
number can be used to refer to a particular error log entry in an error log file. 
The second line contains the error sequence number and the system identification 
value. The error sequence number is a value assigned by the operating system 
to an error log entry to help determine if error log entries are being lost. This 
sequence number value is reset to zero only when the system is rebooted. The 
third and fourth lines of this section specify the type of error log entry being 
reported, the date and time the entry was made, the processor type and revision 
level, and the system serial number. 


The first line of the device-dependent data section identifies the device or 
subsystem on which the error occurred. The remainder of this section consists 

of hardware information, which shows the contents of the device registers, and 
software information, which shows the contents of the I/O database at the time of 
the error. . 


The OpenVMS System Manager’s Manual contains additional information on 
error log reports, including descriptions of error log entries. These descriptions 
specify the action recommended for specific entries. 


The following output report is an example of the report generated by device 
errors, device attention, and device timeouts from a disk on the system. 


VMS SYSTEM ERROR REPORT COMPILED 3-SEP-1993 
15:49:10 
PAGE 

26. 

KRRKKEEKKERKEREREREREKREEEKEREEREKER ENTRY 904, 
KRREKEKKEKEERKEKEKREKEKREREKRERERERERES 

ERROR SEQUENCE 709. LOGGED ON: CPU_TYPE 00000002 
DATE/TIME 20-AUG-1993 15:21:10.79 SYS TYPE 
00000003 

SYSTEM UPTIME: 1 DAYS 01:35:47 
SCS NODE: LSR3 VMS T1.0-FT3 


DEVICE ERROR SYS TYPE = 03 
RZ57 SUB-SYSTEM, UNIT LSR3$DKA0: 


HW REVISION 30303035 
HW REVISION = 5000 


ERROR TYPE 03 
COMMAND TRANSMISSION FAILURE 
SCSI ID 00 
SCSI ID = 0. 
SCSI LUN 00 
SCSI LUN = 0. 
SCSI SUBLUN 00 


SCSI SUBLUN = 0. 

PORT STATUS 00000054 
SSYSTEM-F-CTRLERR, FATAL CONTROLLER 
ERROR 
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SCSI CMD 00000000 
0000 

TEST UNIT RDY 
SCSI STATUS FF 

NO STATUS RECEIVED 
UCB$B_ERTCNT OF 

15. RETRIES REMAINING 
UCBSB_ERTMAX 00 


Q. RETRIES ALLOWABLE 
ORBSL OWNER 00000000 

OWNER UIC [000,000] 
UCBSL_CHAR 1€C54008 

DIRECTORY STRUCTURED 

FILE ORIENTED 

SHARABLE 

AVAILABLE 

ERROR LOGGING 

ALLOCATED 

CAPABLE OF INPUT 

CAPABLE OF OUTPUT 

RANDOM ACCESS 
UCBSL_STS 56544552 

INTERRUPT EXPECTED 

ONLINE 

TIMED OUT 

BUSY 

DEALLOCATE AT DISMOUNT 

"MOUNT VERIFICATION" IN-PROGRESS 
UCBSL OPCNT 00000000 

0. QI0’S THIS UNIT 


UCBSW ERRCNT 0001 
~ 1. ERRORS THIS UNIT 
VMS SYSTEM ERROR REPORT COMPILED 3-SEP-1993 
15:49:10 
PAGE 
27. 
IRP$L_BCNT 00000000 
TRANSFER SIZE 0. BYTE(S) 
IRPSL_BOFF 00000000 
TRANSFER PAGE ALIGNED 
IRP$L_PID 00010042 
REQUESTOR "PID" 
IRP$Q_IOSB 0000014E 
430A0002 IOSB, 0. BYTE(S) TRANSFERRED 


Time Stamp, Volume Mount, and Volume Dismount Entries Examples 


The following are entry examples of a system time stamp, volume mount, and 
volume dismount. The time-stamp entry contains only an identification section, 
which is logged by the operating system at 10-minute intervals. If no other error 
log entries are made during the 10-minute period, the previous time stamp is 
overwritten with the current time stamp. 


The mount volume entry contains an identification section followed by a device- 
dependent data section. The device-dependent data section shows the name of 
the device the volume is mounted on, the volume label (if the volume has a label), 
and the J/O operations and error counts for the device. 


The dismount volume entry contains, in addition to the data provided in the 
volume mount entry, the I/O operations and error counts for the device on which 
the volume was mounted. 


ERROR LOG Examples 


KKKKKKE KE KRKKEK ERK ERERKEKEEERER ENTRY QZ, KK KKKKHEKKKEK ERR KKK RRKRER ERK 


ERROR SEQUENCE 421. LOGGED ON SID 01380101 


TIME STAMP, 4-MAR-93 11:10:08.79 
KA780 REV# 7. SERIAL# 7. 


KKREKEEKEKREKRERKEEKEKEKEEKKKKKKEKK ENTRY QA, REKKKKKKKKRKKEKKEKKEKKEEKKEEEEE 


ERROR SEQUENCE 422. LOGGED ON SID 01380101 


MOUNT VOLUME, 4-MAR-93 11:14:12.51 
KA780 REV# 7. SERIAL# 7. 


UNIT DMAQ:, VOLUME LABEL "TEST" 
656. QIO OPERATIONS THIS UNIT, 1. ERRORS THIS UNIT 


KHKK KEKE RK KK REE KEKEEKEREEEEK ENTRY Q 5 RRR REE RE RRR RRR KKK KKK EERE 
ERROR SEQUENCE 423. LOGGED ON SID 01380101 


DISMOUNT VOLUME, 4-MAR-93 11:14:41.30 
KA780 REV# 7. SERIAL# 7. 


UNIT DMAQ:, VOLUME LABEL "TEST" 


697. QIO OPERATIONS THIS UNIT, 1. ERRORS THIS UNIT 
41. QIO OPERATIONS THIS VOLUME, 0. ERRORS THIS VOLUME 


Machine Check Entries Examples 


The following are examples of machine check error reports. Each report consists 
of three sections: the identification section, the program counter and summary 
code section, and an error-dependent section. 


The program counter and summary code section of the report displays the 
contents of the program counter, the processor status longword, and the summary 
code. The contents of the processor status longword and the summary code are 
described in the text on the right side of the report. 


The error-dependent section consists of CPU-dependent information that was 
logged as a result of the machine check. 


KKKKKK ER EKER RRR EERE RAREEKEEKE ENTRY >: 
KEKE 
ERROR SEQUENCE 2. LOGGED ON: CPU_TYPE 00000002 
DATE/TIME 4-SEP-1993 09:39:51.19 SYS_TYPE 
00000002 

SYSTEM UPTIME: 90 DAYS 00:01:25 
SCS NODE: COBRA6 VMS X5DN-FT4 
MACHINE CHECK SYS TYPE = 02 
KERNEL EVENT HEADER 


FRAME REVISION 0000 

SCB VECTOR 0670 

1ST MOST PRB FRU 00 
FIELD NOT VALID 

2ND MOST PRB FRU 00 
FIELD NOT VALID 

SEVERITY 0000 
FIELD NOT VALID 

CPU ID 0000 

ERROR COUNT 0001 

THRESHOLD 0000 

FAIL CODE 0000 

ERR FIELD LOW 00000005 

00000008 


CPU_0 BUS COMMAND NO-ACK 
CPU_O BUS READ PARITY ERROR 
CPU CYCLE ABORTED WITH HARD ERROR 
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ERR FIELD HIGH 00000000 


RETRY/BYTE CNT 


PALTEMP0 
PALTEMP1 
PALTEMP2 
PALTEMP3 
PALTEMP4 
PALTEMP5 
PALTEMP6 
PALTEMP7 
PALTEMP8 
PALTEMP9 
PALTEMP10 
PALTEMP11 


PALTEMP12 


10:37:03 


PALTEMP13 
PALTEMP14 
PALTEMP15 
PALTEMP16 
PALTEMP17 
PALTEMP18 
PALTEMP19 
PALTEMP20 
PALTEMP21 
PALTEMP22 
PALTEMP23 
PALTEMP24 
PALTEMP25 


PALTEMP26 


00000000 
00000250 
00000000 


00000001 
00000000 
000000BE 
00000000 
00000004 
OO01FCOFS 
00000000 
00000000 
805C3FC0 
FRFFFEEF 
00000000 
00000000 
84FDE000 
FFFFFFFF 
00004200 
00000000 
00000400 
00000000 
00000003 
00000000 
29CB0233 
00000003 
00000000 
00000000 
00000001 


BYTE COUNT 
CAN'T RETRY 


SYSTEM ERROR REPORT 


00000000 
8042F4C0 
FFFFFFFF 
00000000 
00000000 
00000000 
00000000 
0000C000 
00000000 
00000000 
00000000 
BEBC2000 
00000000 
TFFBF924 
00000000 
00002041 
00000000 
40000000 
00000002 
00000000 
00000000 
00000000 
00000000 
805C0000 
FFFFFFFF 
00000000 
00000000 
TFF96000 
00000000 


= 00000250(x) 


COMPILED 8-SEP-1993 


PAGE 


VMS 


PALTEMP27 
PALTEMP28 
PALTEMP29 
PALTEMP30 


PALTEMP31 


EXCP ADDR REG 


EXCP SUM REG 


EXCP MASK REG 


ICCS REG 


PAL BASE 


HW INTR EN REG. 


10:37:03 


3% 


00000000 
00000000 
00D7C000 
00000000 
00000000 
00000002 
002F6000 
00000000 
00D62080 
00000000 
0000815E 
00000000 


00000000 
00000000 
00000000 
00000000 
00000004 
O0O1FCOF8 
00008000 
00000000 


FFFFDCF0 
00000001 


ERROR LOG Examples 


Not PALmode instruction 


EXCEPTION PC 


PAL BASE PA = 000008000(X) 


CRD ERROR INT. ENABLE 
HARDWARE INT. ENABLED ON PIN 3 
SYSTEM ERROR REPORT 


HARDWARE 
HARDWARE 
PCl1 INT. 
PcO INT. 
HARDWARE 
HARDWARE 
HARDWARE 
SLU INT. 
SOFTWARE 
SOFTWARE 
SOFTWARE 
SOFTWARE 
SOFTWARE 
SOFTWARE 
SOFTWARE 
SOFTWARE 
SOFTWARE 
SOFTWARE 
SOFTWARE 
SOFTWARE 
SOFTWARE 
SOFTWARE 
SOFTWARE 


COMPILED 8-SEP-1993 


INT. ENABLED ON PIN 4 
INT. ENABLED ON PIN 5 


DISABLED 
DISABLED 


INT. ENABLED ON PIN 0 
INT. ENABLED ON PIN 1 
INT. ENABLED ON PIN 2 


DISABLE 

INT. LEVEL 
INT. LEVEL 
INT. LEVEL 
INT. LEVEL 
INT. LEVEL 
INT. LEVEL 
INT. LEVEL 
INT. LEVEL 
INT. LEVEL 
INT. LEVEL 
INT. LEVEL 
INT. LEVEL 
INT. LEVEL 
INT. LEVEL 
INT. LEVEL 


1 ENABLED 
2 ENABLED 
3 ENABLED 
4 ENABLED 
5 ENABLED 
6 ENABLED 
7 ENABLED 
8 ENABLED 
9 ENABLED 
10 ENABLED 
11 ENABLED 
12 ENABLED 
13 ENABLED 
14 ENABLED 
15 ENABLED 


KERNAL MODE AST INT. ENABLED 
EXEC. MODE AST INT. ENABLED 
SUPER. MODE AST INT. ENABLED 
USER MODE AST INT. ENABLED 


= 0000000000002057(x) 


PAGE 
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HW INTR REQ REG 00000702 
00000000 
HW INTR. REQ 
PCl INTR REQ. 
PCO INTR REQ. 
CPU INTR REQ. on pin 0 
MEM MGMT ER/DTB 00005110 
00000000 
Integer Reg. used is R = 11(X) 
OP code = 28(X) 
D-CACHE STA REG 000002E0 


00000000 
D-CACHE ADD REG FFFFFFFF 
00000007 
ABOX CTL REG 0000040E 
00000000 


MCHECK ENABLED for UNCOR. ERR 
CRD INTR. ENABLE 
ICACHE STREAM BUFFER ENABLED 
DCACHE ENABLED 

BIU STATUS REG 00002041 


00000000 
Hard Error 
Deache fill error 
READ BLOCK 
BIU ADD REG 40000000 7 
00000002 
BIU CTL REG 30006337 
0000000C 
VMS SYSTEM ERROR REPORT COMPILED 8-SEP-1993 
10:37:03 
PAGE 
4, 


External Cache Enable 

ECC Checking 

Output Enable of Cache RAMs 

BCache Read Speed in cycles = 4(X) 

BCache Write Speed in cycles = 4(X) 
ECC SYNDROMES 00000000 


00000000 
FILL ADDR REG 00006120 
00000000 
MACHINE CHK VA 00006190 
00000000 
B-CACHE TAG REG 12491412 
14480005 
TAG Control P 
TAG Control V 
B-Cache TAG = 48A0(X) 
CSRO 400001C1 
400001C1 
BCC 400001C1 
CSR1 00000000 
BCCE 00000000 
CSR2 00000000 
BCCEA 00000000 
CSR3 00000900 
BCUE 00000900 
CSR4 00D40A2D 
BCUEA 00D40A2D 
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CSR5 0011D4B4 

DTER 0011D4B4 

CSR6 00007F28 

CBCTL 00007F28 

98004082 

CSR7 98004082 

CBE 9c001042 

CSR8 90000003 

CBEAL 90000003 

CSR9 FF200083 

CBEAH FF200083 

CSR10 00000000 

PMBX 00000000 

CSR11 00000000 

IPIR 00000000 

CSR12 00000004 

SIC 00000001 

CSR13 00001388 

ADLK 000C1388 

CSR14 00104B7B 

MADRL 00104B6B 
VMS SYSTEM ERROR REPORT COMPILED 8-SEP-~1993 
10:37:04 
KREKEKRKKKEREKRERRERREREKEKEREEESE ENTRY 6. KEKKREKEEKRKEREREE KERR RKKERER 
ERROR SEQUENCE 3. LOGGED ON SID 03003700 


MACHINE CHECK, 6-MAR-1993 10:11:34.70 
KA730 REV# 0. MIC# 55. 


EXCEPTION PC 80038DC0 


ERROR PSL 01¢00000 
INTERRUPT PRIORITY LEVEL = 00. 
PREVIOUS MODE = USER 
CURRENT MODE EXECUTIVE 


SUMMARY CODE 00000007 

UNCORRECTABLE ECC ERROR 
1ST PARAMETER 00166200 

PAGE #2865. IN ERROR 


RREKKEKKEEKRERKEKKEERKEKEREREKEEEK ENTRY 60. RKEKKEKEKERKEKREKRREREKRKREREREKKEKE 


ERROR SEQUENCE 4872. LOGGED ON SID 02006148 


MACHINE CHECK, 6-MAR-1993 03:50:08.28 
KA750 REV# 72. MIC# 97. 


EXCEPTION PC 80006173 


ERROR PSL 00C80009 
C-BIT 
N-BIT 
INTERRUPT PRIORITY LEVEL = 08. 
PREVIOUS MODE = USER 
CURRENT MODE = KERNEL 
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SUMMARY CODE 


VA LAST REF 
PC AT ERROR 
MDR 
SMR 


RLTO 
TBER 


CAER 
BER 
MCESR 


KHER KK KEKE KKK KKKEKEKEKERERK ENTRY 


ERROR SEQUENCE 4949. 


00000002 


800A079E 
80006178 
8009F38C 
00000008 


00000000 
00000007 


00000000 
00000000 
00000004 


TRANSLATION BUFFER OR BUS ERROR 


CPU MODE = KERNEL 
VIRTUAL 
READ 


TB GO DATA ERROR 
TB Gl DATA ERROR 
TB G0 TAG ERROR 


OPERAND REFERENCE 
TB PARITY ERROR 
BA RRRRKRREKRREK ERK E KER REKERERE 


LOGGED ON SID 01388525 


MACHINE CHECK, 6-MAR-1993 15:09:11.31 
KA780 REV# 7. SERIAL# 1317. 


EXCEPTION PC 
ERROR PSL 


SUMMARY CODE 


CES 


MICRO PC 
VA/VIBA 

D REGISTER 
TBERO 


TBER1 


SBITA 


CACHE PE REG 


SBIER 
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00004890 
03c00000 


00000000 


00010084 


00000200 
TFF735D4 
FFFFC284 
0000DC81 


00000040 


E00B83F5 


00004000 
00001802 


INTERRUPT PRIORITY LEVEL = 00. 
PREVIOUS MODE = USER 
CURRENT MODE = USER 


CP READ TIMEOUT 
- OR ERROR CONFIRMATION FAULT 


SUPERVISOR AST PENDING 
ALU C31 
NESTED ERROR 


ENABLE MEMORY MANAGEMENT 
TB HIT GROUP 1 

MICRO CODE "MCT" FIELD = 07 
MICRO CODE "ADS" 

MICRO CODE "FS" 


LAST TB WRITE PULSE TO GROUP 1 
TIMEOUT CONSOLE ADDR = 002E0FD4 
PROTECTION CHECKED REFERENCE 
TIMEOUT REFERENCE IN USER MODE 
CP ERROR 

SBI NOT BUSY 


WAITING FOR READ DATA TIMEOUT 
CPU TIMEOUT 


ERROR LOG Examples 


REKKKERKERKEKREREKREKEEEEEKEKEKE ENTRY BQ, KEK KKKKKEKEKKKEKKKKEKEKKKEKERKEKE 


ERROR SEQUENCE 1077. LOGGED ON SID 04FFFFFF 
MACHINE CHECK 30-MAR-1993 20:55:17.41 
KA86 REV# 255. SERIAL# 4095. MFG PLANT 7. 


EHMSTS 


EVMQSAV 


EBCS 


EDPSR 


CSLINT 


IBESR 


EBXWD1 


EBXWD2 


VASAV 


VIBASAV 


ESASAV 


ISASAV 


CPC 


MSTAT1 


MSTAT2 


40000802 


00000004 


00000800 
00000000 


04183D1F 


00004000 


00000004 


TFF593D0 


TFF593F8 


QO00E7FF 


0000E7F2 


0000E7F2 


QO00E7F4 


84006004 


00004F00 


VMS ERROR CODE = EBOX 
MICRO TRAP VECTOR = 08 (X) 
EHM ENTERED 


VIRTUAL ADDRESS FOR EBOX PORT 
_ REQUESTS 


ECS PARITY ERROR 


C BUS ADDRESS = 1F (X) 

C BUS DATA = 3D (X) 

INTERRUPT PRIORITY REQUEST = 8. 
INTERNAL SOURCE 

I/O ADAPTER = 0. 

INTERVAL TIMER 


UOP SEL = IBOX REGISTER SELECT 
UTPR <2:0> = EBOX PORT 
ENABLE ETRAP 


TOP OF "SP STACK" 
_ CONTENT IS ONE OF THE LAST 
__ LONGWORDS WRITTEN TO MBOX 


TOP OF "SP STACK" MINUS ONE 
_ CONTENT IS ONE OF THE LAST 
_ LONGWORDS WRITTEN TO MBOX 


VIRTUAL ADDRESS FOR OP FETCH 
PORT REQUEST ADDRESS 

. CALCULATION FOR OPERAND 

_ PRE-FETCH AND RESULT DELIVERY 


VIRTUAL ADDRESS OF NEXT IBUF 
_ PORT REQUEST TO FILL IBUFFER 


PC OF INSTRUCTION DURING EBOX 
_ EXECUTION AND RESULT STORAGE 


PC OF INSTRUCTION WHICH VA 

CALCULATION UNIT IS DOING ADDRESS 
= CALCULATION OR OPERAND PRE-FETCH 
_ OR IS PASSING OPERAND DATA 


PC OF INSTRUCTION IN 
_ DECODE UNIT 


CO TAG MISS 

BLOCK HIT 

ABUS ADAPTER = 0. 

WORD COUNT = 0. 

CYCLE TYPE = READ REGISTER 
DEST CP = EBOX 


DIAGNOSTIC STATUS FROM SBIA 
RD COM/MSK <3:0> = F (X) 
RD DAT L/S <1:0> = 0 (X) 
ABUS BAD DATA CODE 

PAMM DATA = ARRAY #0.,SLOT #1. 
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MDECC 00066200 
(* DATA NOT VALID *) 
MERG 04000100 
MEMORY MANAGEMENT ENABLE 
CSHCTL 00000003 
CACHE 0 ENABLE 
CACHE 1 ENABLE 
MEAR ~ 9000007C 
PHYSICAL ADDRESS IN PA LATCH 
AT TIME OF ERROR = 0000007C 
MEDR 0000001F 
DATA WORD USED DURING ERROR 
FBXERR FFFFFFFF 
(* DATA NOT VALID *) 
CSES 1BD73E01 
CS CODE = EBOX CONTROL STORE PARITY 
ERROR 
CS SYNDROME = 3E (X) 
CS ADDRESS = 1BD7 (X) 
ERROR PC 0000E7F2 
ERROR PSL 03C00004 
Z-BIT 
INTERRUPT PRIORITY LEVEL = 00. 
PREVIOUS MODE = USER 
CURRENT MODE = USER 
IOA ES 00000000 


(* DATA NOT VALID *) 
AN/ER/INC=MACH ERR:ERRLOG.SYS_31MAR1990/ENT=S=82/OUT=DP. 


Memory Error Entries Example 


Memory error log entries consist of two types: fatal and nonfatal. A nonfatal 
memory error indicates that a single bit has failed within a memory location, and 
that the ECC (error code correctable) was able to compensate for the error and 
correct the data. A fatal error indicates that multiple bits were erroneous, and 
that the ECC could not correct the data. 


Both the fatal and nonfatal memory entries are similar in their format. The 
memory error log reports can be divided into two logical areas of information. The 
first section of a memory error log report is the identification area. The second 
section contains memory controller-specific information. This data represents the 
information contained within the memory controller registers at the time of the 
memory error. Bit-to-text translation of the registers is performed and then listed 
on the right side of the report. 


KEKE KKK KEKE REE EEKEE EERE ENTRY TD RR RRR RRR KKK KKK RK REE R RR ERR EEK 


ERROR SEQUENCE 4. LOGGED ON SID 03003700 


MEMORY ERROR, 6-MAR-1993 10:11:34.70 
KA730 REV# 0. MIC# 55. 


CSRO 00166200 
ERROR SYNDROME = 7F 
CORRECTED ERROR, BIT #31. 
ARRAY #1. IN ERROR 
CSR1 18000000 
MEMORY MAPPING ENABLE 
ENABLE "CRD" REPORTING 
CSR2 8100000F 


MEMORY SIZE = 2048.K 
64K RAMS PRESENT 


ERROR LOG Examples 


KRKKKKEKKEEKREREKEREKERKEREKEKE ENTRY 91. RREKKEREKKEKEKRERREREREREKREREERS 


ERROR SEQUENCE 342. LOGGED ON SID 0138207A 


FATAL MEMORY ERROR, 4-MAR-88 08:16:45.20 
KA780 REV# 7. SERIAL# 122. 


CONTROLLER AT TR #5. 


PRICFNG 00000040 
ADAPTER IS MULTI-PORT MEMORY 
PORT NUMBER = 0. 
PRTCR 00000003 
MASTER INTERRUPT ENABLE 
PORT INTERFACE INTERRUPT ENABLE 
RAM COUNT 0. 
PCSR 07870003 
ERROR INTERRUPT ENABLE 
IVDTCR 01870001 
INVALIDATE CACHE DEVICE ID = 0. 
8. ARRAY BOARD(S) PRESENT 
MEMORY BASE ADDRESS = 6144.K 
AER 16A70005 
ERROR SYNDROME = 05 
RDS ERROR 
ARRAY #6. IN ERROR 
ARRAY BANK #1. IN ERROR 
ERROR LOG REQUEST 
CSRO 0000C2C8 
MEMORY CONTAINS VALID DATA 
PORT #2. POWERED DOWN 
PORT #3. POWERED DOWN 
ERROR INTERRUPT FROM PORT #1. 
PORT #2. OFFLINE 
PORT #3. OFFLINE 
CSR1 0000380A 
PORT #0. CONNECTED TO AN SBI 
PORT #1. CONNECTED TO AN SBI 
PORT #2. NOT PRESENT 
PORT #3. NOT PRESENT 
INVALIDATION MAP PRESENT 
PORT #0. INVALIDATION ACK RECEIVED 
PORT #1. INVALIDATION ACK RECEIVED 
MAT 0000C000 


Nonfatal and User Bugchecks Entry Example 

The following is an example of a fatal bugcheck. Nonfatal and user bugcheck 
reports have the same format. These reports consist of three sections: 
identification, bugcheck reason and process information, and system register 
information. 
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VMS 
16:17:03 


SYSTEM ERROR REPORT COMPILED 3-SEP-1993 
PAGE 
l. 


KKK KKK KKAK ERR ER EKERERERAKER ENTRY 
FOI IIIT RR TR BR 

ERROR SEQUENCE 15. 

DATE/TIME 22-JUL-1993 13:43:48.96 
00000003 

SYSTEM UPTIME: 90 DAYS 00:07:26 

SCS NODE: LSR3 


FATAL BUGCHECK SYS TYPE = 03 
OPERATOR, Operator requested system shutdown 


PROCESS NAME Aut 
PROCESS ID 00010004 


ERROR PC 00000000 000304A0 


= 08000000 00001F03, SW = 03, Previous Mode = 
00, Current Mode = KERNEL 
31, SP Alignment = 8 


25. 
LOGGED ON: CPU TYPE 00000002 
SYS TYPE 


VMS T1.0-FT3 


Process Status USER 
System State = 
VMM = 00 IPL = 


STACK POINTERS 


KSP 00000000 7FF95F08 ESP 00000000 7FF9A000 
USP 00000000 7FE63B80 


GENERAL REGISTERS 


SSP 00000000 7FFA04C0 


00000000 
00000000 
00000000 
00000000 
00000000 
FEEFFEFE 
00000000 
00000000 
00000000 
00000000 
00000000 


00000001 
00000001 
00000000 
7FFA0800 
00000004 
80403C30 
00000000 
00800000 
00000000 
00000002 
TFF95F08 


SYSTEM REGISTERS 


PC 


00000000 
00000000 
00000000 
00000000 
00000000 
00000000 
00000000 
FFFFFFFF 
00000000 
00000000 
00000000 


00000000 
00000001 
00000000 
00.000000 
00010100 
00000474 
00000000 
804308E8 
00000001 
00030440 
000304A0 


FFFFFFFF 
00000000 
00000000 
00000000 
00000000 
00000000 
FFFFFFFF 
88000000 
00000000 
00000000 
08000000 


805ED100 
00000001 
7FFA05F8 
7FFBE3E0 
02080061 
00004000 
805C04B6 
£4000003 
00000002 
TFF95F10 
00001F03 


000005D3 

Page Table Base Register 
00B98080 

Privileged Context Block Base 
805C0000 

Processor Base Register 
00000000 

System Control Block Base 
0000017B 

Software Interrupt Summary Register 
00000000 

Address Space Number 
0000003F 

AST Summary/AST Enable 
0000000F 

Absolute Time 


PTBR 00000000 


PCBB 00000000 
PRBR FFFFFFFF 
SCBB 00000002 
SISR 00000000 
ASN 00000000 
ASTSR ASTEN 00000000 


AT 00000000 
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Unknown Entries Examples 


The following are sample reports for error log entries of unknown type. Each 
report has an identification section and an error log record section. The error log 
record section contains two types of records: interpretable and noninterpretable. 
If ERROR LOG can interpret the fields of the record, the utility gives the name 
of the field, its contents, and interprets what the field is. If the utility cannot 
interpret the fields of a record, it gives the longword value of the field and its 
contents in hexadecimal format. 


KRREKKEKEKKEREKEEERERERERERKEEKEEK ENTRY VL CE CSS E SESE SESE SELES ESE EE EE 


ERROR SEQUENCE 2. . LOGGED ON SID 03003600 


"UNKNOWN DEVICE" ENTRY, 4-MAR-88 10:12:12.44 
KA730 REV# 0. MIC# 54. 


ERROR LOG RECORD 


ERFSL_SID 03003600 

SYSTEM ID REGISTER 
ERLSW ENTRY 0062 
eg ERROR ENTRY TYPE 
EXE$GQ SYSTIME C9764980 

008C2F30 64 BIT TIME WHEN ERROR LOGGED 

ERLS$GL_SEQUENCE 0002 

UNIQUE ERROR SEQUENCE = 2. 


UCBS$W_STS 0110 

DEVICE STATUS 
UCB$B_DEVCLASS 42 

DEVICE CLASS = 66. 
UCB$B_DEVTYPE 42 

DEVICE TYPE = 66. 
UCBSW_UNIT 0000 

PHYSICAL UNIT NUMBER = 0. 
UCB$W_ERRCNT 0001 


UNIT ERROR COUNT = 1. 
UCB$L_OPCNT 00000001 


iT} 
re 
. 


UNIT OPERATION COUNT 
ORB$L_OWNER 00010004 

OWNER UIC = [001,004] 
UCB$L_DEVCHAR 00440007 

DEVICE CHARACTERISTICS 


UCB$B_SLAVE 00 
DEVICE SLAVE CONTROLLER = 0. 
DDBS$T_NAME 41515403 
00000000 
00000000 
00000000 
| GU OR ew aie Gias o Gcacss< / 
LONGWORD 1. 00000008 
LONGWORD 2. 00000007 
LONGWORD 3. 00000502 
LONGWORD 4. 04000000 
LONGWORD 5. 00010000 
LONGWORD 6. 00000000 
LONGWORD 7. 00000080 
LONGWORD 8. 00000000 
LONGWORD 9. 00000000 
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KKEKKK KEKE ERR RR EEEREREERE ENTRY LOL, RERRRKKRK EKER KER RE KEREREEEE 


ERROR SEQUENCE 213. LOGGED ON SID 070001FF 


"UNKNOWN ENTRY", 4-MAR-88 11:35:15.73 
UVAX1 REV# 255. MIC# 1. 


ERROR LOG RECORD 


ERFSL SID 070001FF 
= SYSTEM ID REGISTER 
ERLSW_ENTRY 0008 
ERROR ENTRY TYPE 
EXE$GQ_SYSTIME 89953F20 
008C3E2A 64 BIT TIME WHEN ERROR LOGGED 


ERL$GL_SEQUENCE 00D5 
UNIQUE ERROR SEQUENCE = 213. 


ee 
Teche} 


LONGWORD 1. 00000001 


LONGWORD 2. 00410001 


Example of a Brief Report 
The following is an example of a report generated with the /BRIEF qualifier. 


VAX/VMS SYSTEM ERROR REPORT COMPILED 25-AUG-1990 09:42 

PAGE 1. 
FOO IO II TOO EI ENTRY 1 ORI IK RK 
ERROR SEQUENCE 11. LOGGED ON: SID 08000000 
DATA/TIME 18-JUL-1990 22:53:41.57 SYS TYPE 00000000 


DEVICE ERROR KA630 
RD32 SUB-SYSTEM, UNIT RICHIES$DUA0: 


DMA ADDRESS 000000 

DSECT CHEAD DHEAD CCYL DCYL SCNT 
06 14 14 9C 9C 01 
RTICNT CSTAT MODE DSTAT TERM ISTAT 
F0 08 C0 B2 BD 28 
CMD 

56 


Summary Report Examples 


The following are examples of summary reports generated with the /SUMMARY 
qualifier using the DEVICE, ENTRY, HISTOGRAM, MEMORY, and VOLUME 
keywords. 


Sample Device Summary Report ((SUMMARY=DEVICE) 
DEVICE SUMMARY LOGGED BY SID 0484F00B 


ERRORS TIMEOUTS UCB ERROR UCB OPERATION 
[HARD] [SOFT] [HARD] [SOFT] COUNT COUNT 
_HSCOO1SDUAL: 

ye 0. 0. 0. 25. 1027. 
"WORK 1A" 

3 0 0 0. 3 35 
"WORK 1B" 

4 0 0 0 2. 243 
TOTALS 9, 0. 0. 0. oe. 4 243. 


ERROR LOG Examples 


Sample Entry Summary Report ((SUMMARY=ENTRY) 
SUMMARY OF ALL ENTRIES LOGGED BY SID 0484F00B 


MACHINE CHECK 9. 
SBIA ERROR 10. 
SYSTEM START-UP 7. 
ERRLOG.SYS CREATED 3. 
FATAL BUGCHECK 6. 
TIME-STAMP 223. 
VOLUME MOUNT 678. 
VOLUME DISMOUNT 194. 
DEVICE ATTENTION ie 
ERL$LOGSTATUS 7. 
ERL$LOGMESSAGE 1254. 
ERL$LOGMSCP 431. 
DATE OF EARLIEST ENTRY 1-AUG-1990 09:54:51.52 
DATE OF LATEST ENTRY 27-AUG-1990 12:11:29.26 


Sample Histogram Summary Report ((SUMMARY=HISTOGRAM) 
PROCESSED ENTRIES HOUR-OF-DAY HISTOGRAM LOGGED BY SID 0484F00B 


00:00 449, RRR ERE RE REE RRR EKER RE RERERERERKEEKREKE 
01:00 QT] BRRRKRRKKRKE REE KR RRR REE RE RRR RERERERREREREEKK 
02:00 By BERK KKK KR KKK EEK KEE KK KKKEREKEREKS 

03:00 19. KERKKEEREKREKREKEREREER 

04:00 33 RRR RARER AKER ARE KEKE EKER KERR ERE 

05:00 25g RRR KEKKRKKKAERKEKEEKEKEKEER 

06:00 BL RRR REE KRHA KEE RRR R ERR R ERE RRR EKER ERE EERE 
07:00 LIQ, KERR RRR ERK KERR RRR RRR ERK EERE ERE REREREREREREKEEE 
08:00 D7 GREER RRR RRR RRR REE RRR RRR RRR EKER ERE REREREREREERK 
09:00 LLL, RRR R RRR RRR RK RRR EERE KERR ERR KER ERE ERERERERER ERR 
10:00 L244, RR RKKRKH RRR ER KERR ER ERE ERR RE RR KR RE REE RERERERER EERE 
11:00 L139, KERR RRR K HERRERA KERR REE RRR KK ER ERE RE KER RRR KERR 
12:00 197. EERE KKH EERE EKER ERR ERE RRR REE ER REE RE RERERER EERE RERE 
13:00 119. KREKRKEKKEEKEKEKRERER ERE RRR EERE EKRRRRKRERRERERERERKKEEEREKE 
14:00 BG RRR KRKKKEEEK EKER KEERERKEEKEKEKEERERKKKK 

15:00 BD RRR KEK ERR K ERK RRR KERR ERK RRR EKER ERE RRR KERR RRR KEE 
16:00 TO, KERR KKK RAKE RRR EER ERK ERK ERR ERE RK REREREKK 
17:00 195, RR RRK RRR RK KEK KKK KERR RRR RRR RR RRR RR RERERKERKERE REE 
18:00 LL. EERE RR KK ERK RRR ERR ERK ERK ERE KER KR ERE KER ER REKKERRE KEK 
19:00 LOB, RAK RK RRR K EKER EKER ERK KERR RRR EKER REREK EERE 
20:00 169 BERR KHEKR EERE RRR ARK ERE EERE REE RE RE RE REE RE REREREEE 
21:00 139, KERR KHK HERE ERK ERR ERE RRR RR K KR RE RE RE RE RRRERREKEEK 
22:00 39. RRR EKER ERRERKKEREREREKEEKRERE 

23:00 B35 RRR KEKE KR KKK ERE RRR RRR RRR KKK RR RRR KEKE RE RRR REE REKRERE 


Sample Memory Summary Report ((SUMMARY=MEMORY) The format of 
memory summary reports varies slightly across the range of CPU/memory 
subsystem configurations. 


SUMMARY OF MEMORY ERRORS LOGGED BY SID 0484F00B 


ARRAY# BIT# WORD CORRECTED UNCORRECTED 
COUNT ERRORS ERRORS 
Om ° 12% 00. (73. 
02. DBL BIT 00. oe 
04. 04. 00. 3: 
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ERROR LOG Examples 


Sample Volume Summary Report ((SUMMARY=VOLUME) 
VOLUME LABEL(S) LOGGED BY SID 0484F00B 


QI0(S) ERROR(S)  MOUNT(S) 
"WORK 1A" 
_HSCO01$DUA1: 
51 3. 1 
_HSCO01$DUA2: 
65. 0 2 
TOTALS 116. 3 3 
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Install Utility 


INSTALL Description 


The Install utility (INSTALL) improves the performance of executable and 
shareable images, especially those that run frequently, usually run concurrently 
with several processes, or require special privileges. 


The system defines installed images on internal data structures called 

known file lists. Each entry in the known file list identifies the installed 

file name and the attributes with which the file was installed. A separate 
known file list exists for all installed images whose device, directory, and 

file type are identical. For example, all installed images with the file name 
DISK$VOLUME:[MAIN]filename.EXE would be on one known file list, and all 
installed images with the file name DISK$VOLUME:[TEST]filename.EXE would 
be on another known file list. 


Known file lists last only while the system is operating. If the system is shut 
down or fails for any reason, you must reinstall all known images after the 
system is rebooted. For this reason, the site-independent startup command 
procedure, SYS$SYSTEM:STARTUP.COM, includes a series of INSTALL 
commands that install certain system programs as known images. You are 
encouraged to include additional INSTALL commands for selected images in the 
site-specific command procedure SYS$MANAGER:SYSTARTUP_VMS.COM. 
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INSTALL Usage Summary 


Format 


Use the Install utility (INSTALL) to enhance the performance of selected 
executable and shareable images, to assign enhanced privileges to images, and to 
support user-written system services. The system stores the name and attributes 
of installed images on known file lists. 


INSTALL [command] 


Parameter 

command 

Specifies an INSTALL command. This parameter is optional. If no command is 
specified, the utility displays its prompt and waits for command input. 


Usage Summary 


10~—4 


To invoke INSTALL, enter the DCL command INSTALL at the DCL prompt as 
follows: 


$ INSTALL 
The utility responds with the following prompt: 
INSTALL> 


You can then perform INSTALL operations by entering the appropriate INSTALL 
commands. Alternatively, you can enter a single INSTALL command on the same 
line as the command that invokes the utility, for example: 


$ INSTALL LIST/FULL SYSSSYSTEM:LOGINOUT 


To exit from the Install utility, enter the EXIT command at the INSTALL> 
prompt or press Ctrl/Z. Either method returns control to the DCL command level. 


The Install utility requires that you have the CMKRNL privilege to invoke it. It 
requires the SYSGBL privilege to create system global sections and the PRMGBL 
privilege to create permanent global sections. 


INSTALL 


INSTALL Commands 


ADD 


Format 


Parameter 


Qualifiers 


This section describes and provides examples of the INSTALL commands. 
Table 10-1 summarizes the INSTALL command functions. 


Table 10-1 INSTALL Command Summary 


Command Function 

ADD Installs the specified image as a known file entry 

CREATE Installs the specified image as a known file entry (identical to ADD 
command) 

DELETE Deletes a known file entry 

EXIT Exits from INSTALL 

HELP Describes how to use INSTALL 

LIST Displays a description of each specified known file entry, global 
sections, and the addresses of known file entry data structures 

PURGE Deletes all known file entries installed without the /NOPURGE 
qualifier 

REMOVE Deletes a known file entry (identical to DELETE command) 

REPLACE Associates a known file entry with the latest version of the image file 


or modifies the attributes of an installed image 


Installs the specified image file as a known image. 


ADD _file-spec 


file-spec 

Names the file specification of an image to be installed as a known image. The 
file specification must name an existing executable or shareable image. If you 

omit the device and directory specification, the default SYS$SYSTEM is used. 

The default file type is .EXE. 


The highest existing version of the file is used by default. However, you can 
specify another version of the file as the known version of the image. Even if 
other versions of the file exist, the version that you specify will be the version 
that satisfies all known file lookups for the image. 


/ACCOUNTING 

/INOACCOUNTING (default) 

Enables image-level accounting for selected images even if image accounting 

is disabled on the local node (by using the DCL command SET ACCOUNTING 
/DISABLE=IMAGE). When image accounting is enabled on the local node, it logs 
all images, and the /NOACCOUNTING qualifier has no effect. 
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/EXECUTE_ONLY 

/NOEXECUTE_ONLY 

The /EXECUTE_ONLY qualifier is only meaningful to main programs. It allows 
the image to activate shareable images to which the user has EXECUTE access 
but has no READ access. All shareable images referenced by the program must 
be installed, and OpenVMS RMS uses trusted logical names (those created for 
use in EXEC or KERNEL mode). 


You cannot specify this qualifier for an executable image linked with the 
/TRACEBACK qualifier. 


/HEADER_RESIDENT 

/NOHEADER_RESIDENT 

Installs the file as a known image with a permanently resident header (native 
mode images only). The image is made permanently open even if /OPEN is not 
specified. 


/LOG 

/NOLOG 

Lists the newly added known file entry along with any associated global sections 
created by the installation. 


/OPEN 
/NOOPEN 
Installs the file as a permanently open known image. 


/PRIVILEGED[=(priv-name[,...])] 

/NOPRIVILEGED[=(priv-name{,...])] 

Installs the file as a known image with the privileges specified. Then, if the 
image is not located on the system volume, the image is made permanently open 
even if /OPEN is not specified. 


The /PRIVILEGED qualifier applies only to executable images. 


You cannot specify this qualifier for an executable image linked with the 
/TRACEBACK qualifier. 


You can specify one or more of the privilege names in Table 10-2. 


Table 10-2 Privileges for Installed Images 


ACNT ALLSPOOL ALTPRI 
tAUDIT BUGCHK BYPASS 
CMEXEC CMKRNL DETACH 
DIAGNOSE tDOWNGRADE EXQUOTA 
GROUP GRPNAM GRPPRV 
tIMPORT LOG_IO MOUNT 
NETMBX OPER PFNMAP 
PHY_IO PRMCEB PRMGBL 
PRMMBX PSWAPM READALL 
TVAX specific 


(continued on next page) 


AXP 


Examples 


INSTALL 
ADD 


Table 10-2 (Cont.) Privileges for Installed Images 


SECURITY SETPRV SHARE 
SHMEM SYSGBL SYSLCK 
SYSNAM SYSPRV TMPMBX 
TUPGRADE VOLPRO - WORLD 
*VAX specific 

/PROTECTED 

/NOPROTECTED 


Installs the file as a known image that is protected from user-mode and 
supervisor-mode write access. You can only write into the image from EXEC 
or KERNEL mode. The /PROTECTED qualifier together with the /SHARE 
qualifier are used to implement user-written services, which become privileged 
shareable images. 


/PURGE 

/NOPURGE 

Specifies that the image can be removed by a purge operation; if you do not 
specify /PURGE, you can remove the image only by a delete or remove operation. 
The /NOPURGE qualifier is the default form of the qualifier. 


/RESIDENT 

On AXP systems, causes the image code sections to be placed in the granularity 
hints code region and optionally compresses the image data sections, which 
remain located in process space. The image must be linked using the /SHARE 
and the /SECTION_BINDING=CODE qualifiers. ¢. 


/SHARED 

/JNOSHARED 

Installs the file as a shared known image and causes creation of global sections 
for the image. The image is made permanently open even if /OPEN is not 
specified. 


/WRITABLE 

/NOWRITABLE 

Installs the file as a writable known image as long as you also specify the 
/SHARED qualifier. The /(WRITABLE qualifier is automatically negated if the 
/NOSHARED qualifier is specified. 


1. INSTALL> ADD/OPEN/SHARED WRKD$:[MAIN]STATSHR 
The command in this example installs the image file STATSHR as a 
permanently open, shared known image. 

2. INSTALL> ADD/OPEN/PRIVILEGED=(GROUP,GRPNAM) GRPCOMM 


The command in this example installs the image file GRPCOMM as a 
permanently open, known image with the privileges GROUP and GRPNAM. 


Any process running GRPCOMM receives the GROUP and GRPNAM 
privileges for the duration of the execution of GRPCOMM. The full name 
of GRPCOMM is assumed to be SYS$SYSTEM:GRPCOMM.EXE. 
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Format 


Parameter 


Qualifiers 


3. INSTALL> ADD/LOG GRPCOMM 


The command in this example installs the image file GRPCOMM as a known 
image and then displays the newly added known file entry. 


Installs the specified image file as a known image. The CREATE command is 
identical to the ADD command. 


CREATE file-spec 


file-spec 

Names the file specification of an image to be installed as a known image. The 
file specification must name an existing executable or shareable image. If you 
omit the device and directory specification, the default SYS$SYSTEM is used. 
The default file type is .EXE. 


The highest existing version of the file is used by default. However, you can 
specify another version of the file as the known version of the image. Even if 
other versions of the file exist, the version that you specify will be the version 
that satisfies all known file lookups for the image. 


/ACCOUNTING 

/NOACCOUNTING (default) 

Enables image-level accounting for selected images even if image accounting 

is disabled on the local node (by using the DCL command SET ACCOUNTING 
/DISABLE=IMAGE). When image accounting is enabled on the local node, it logs 
all images, and the /NOACCOUNTING qualifier has no effect. 


/EXECUTE_ONLY 

/NOEXECUTE_ONLY 

The /EXECUTE_ONLY qualifier is meaningful only to main programs. It allows 
the image to activate shareable images to which the user has EXECUTE access 
but has no READ access. All shareable images referenced by the program must 
be installed, and OpenVMS RMS uses trusted logical names (those created for 
use in EXEC or KERNEL mode). 


You cannot specify this qualifier for an executable image linked with the 
/TRACEBACK qualifier. 


/HEADER_RESIDENT 

/NOHEADER_RESIDENT 

Installs the file as a known image with a permanently resident header (native 
mode images only). The image is made permanently open even if /OPEN is not 
specified. 


AXP 


INSTALL 
CREATE 


/LOG 

/NOLOG 

Lists the newly created known file entry along with any associated global sections 
created by the installation. 


/OPEN 
/NOOPEN_ | 
Installs the file as a permanently open known image. 


/PRIVILEGED[=(priv-namef....])] 

/NOPRIVILEGED[=(priv-namef....])] 

Installs the file as a known image with the privileges specified. Then, if the 
image is not located on the system volume, the image is made permanently open 
even if /OPEN is not specified. For a complete listing of privileges, see the ADD 
command. 


The /PRIVILEGED qualifier applies only to executable images. 


You cannot specify this qualifier for an executable image linked with the 
/TRACEBACK qualifier. 


/PROTECTED 

/NOPROTECTED . 

Installs the file as a known image that is protected from user-mode and 
supervisor-mode write access. You can only write into the image from EXEC 
or KERNEL mode. The /PROTECTED qualifier together with the /SHARE 
qualifier are used to implement user-written services, which become privileged 
shareable images. 


/PURGE 

/INOPURGE 

Specifies that the image can be removed by a purge operation; if you do not 
specify /PURGE, you can remove the image only by a delete or remove operation. 
The /NOPURGE qualifier is the default form of the qualifier. 


/RESIDENT 

On AXP systems, causes the image code sections to be placed in the granularity 
hint code region and optionally compresses the image data sections, which remain 
located in process space. The image must be linked using the /SHARE and the 
/SECTION_BINDING=CODE qualifiers. ¢ 


/SHARED 

/NOSHARED 

Installs the file as a shared known image and causes creation of global sections 
for the image. The image is made permanently open even if /OPEN is not 
specified. 


/WRITABLE 

/NOWRITABLE 

Installs the file as a writable known image as long as you also specify the 
/SHARED qualifier. The /WRITABLE qualifier is automatically negated if the 
/NOSHARED qualifier is specified. 
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Description 
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1. INSTALL> CREATE/OPEN/SHARED WRKDS$: [MAIN]STATSHR 


The command in this example installs the image file STATSHR as a 
permanently open shared known image. 


2. INSTALL> CREATE/OPEN/PRIVILEGED=(GROUP,GRPNAM) GRPCOMM 


The command in this example installs the image file GRPCOMM as a 
permanently open known image with the privileges GROUP and GRPNAM. 


Any process running GRPCOMM receives the GROUP and GRPNAM 
privileges for the duration of the execution of GRPCOMM. The full name 
of GRPCOMM is assumed to be SYS$SYSTEM:GRPCOMM.EXE. 


3. INSTALL> CREATE/LOG GRPCOMM 


The command in this example installs the image file GRPCOMM as a known 
image and then displays the newly created known file entry. 


Deletes a known image. 
DELETE file-spec 


file-spec 
Names the file specification of an image installed as a known image. 


None. 


The DELETE command deletes an entry from the known image file list. The 
image’s entry on the known file list and any global sections created for the image 
are deleted. The image file remains unaffected. Writable global sections are 
written back to disk upon their removal as known images. . 


If a process is accessing global sections when the DELETE command is entered, 
the global sections are deleted only after the operation initiated by the process 
completes. However, once the command is entered, no additional processes can 
access the global sections because they are marked for deletion. 


The DELETE command is identical to the REMOVE command. 


Example 


EXIT 


Format 


Parameters 


Qualifiers 


HELP 


Format 


Parameter 


Examples 


INSTALL 
DELETE 


INSTALL> DELETE WRKDS$: [MAIN]STATSHR 


The command in this example deletes the entry for the image STATSHR from the 
known file list. 


Terminates INSTALL and returns control to the DCL command level. You can 
also exit from INSTALL by pressing Ctrl/Z. 


EXIT 


None. 


None. 


Displays information about how to use INSTALL. 


HELP [command] 


command 
Specifies the name of a command for which help infomation is to be displayed. If 
you omit a command name, a list of commands is displayed and you are prompted 


for a command name. 


1. INSTALL> HELP 


The command in this example displays a list of INSTALL topics and a Topic? 
prompt. Any topic from the list can be entered at the prompt. 


10-11 


INSTALL 
HELP 


LIST 


Format 


Parameter 


Qualifiers 
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2, INSTALL> HELP LIST 
LIST 
For display of a one-line description of the specified known image, or if 


no file is specified, then for all known images. Use with /FULL to obtain 
a multiline description. 


Format: LIST [file-spec] /qualifier 


QUALIFIER COMBINATION BEHAVIOR 
LIST [file-spec] List the known file entry for file-spec 
LIST List all entries 

Additional information available: 


Qualifiers 
/FULL /GLOBAL /STRUCTURE / SUMMARY 


The command in this example displays help information on the LIST 
command. 


Displays a description of each specified known image, or if no file is specified, all 
known images. 


| LIST  [file-spec] 


file-spec — 
Names the file specification of an image installed as a known image. If you omit 
the file specification, INSTALL displays all known file entries. 


/FULL 

Displays a multiline description of the specified known image, including the 
number of accesses, the number of concurrent accesses, and the number of 
global sections created. The /FULL qualifier with the /GLOBAL qualifier shows 
information on global sections, plus the current owner and protection codes and 
access control entries. 


/GLOBAL 
Lists global sections for any specified shared image, or if you omit the file 
specification, lists all global sections. 


/STRUCTURE 
Lists addresses of known file entry data structures. 


/SUMMARY 
Used with the /GLOBAL qualifier, displays the global section and global page 
usage on the system for local and shared memory global sections. 


Description 


Examples 


INSTALL 
LIST 


You can use the LIST command with the /FULL qualifier to display information 
that is useful in tuning the known file database. For example, a high entry-access 
count for an image may indicate that system performance could benefit if the 
image were installed /OPEN. Similarly, high entry-access counts for an image 
may indicate that installing the image /SHARED—that is, with global sections— 
could improve performance. For a description of global sections and global pages, 
including information on how to estimate the size of installed images, see the 
OpenVMS System Services Reference Manual. 


1. INSTALL> LIST 


The command in this example displays a single-line description of all known 
images. The description includes the file specification of the known image and 
its attributes. 


SYSSDISK:<SYS0.SYSCOMMON.SYSEXE>.EXE 


ANALIMDMP;1 @ Prv 

AUTHORIZE; 1 Prv 

CDU;1 Open Hdr Pry 

DCL;1 Open Hdr Shar Lnkbl 

FAL; 1 Open Hdr Shar 

INSTALL; 1 Prv 

LOGINOUT; 1 Open Hdr Shar Prv 

MAIL; 1 Open Hdr Shar 

MAIL SERVER; 1 Open Hdr Shar Prv 

REQUEST; 1 Prv 

SET;1 Open Hdr Shar Prv 

SETAUDIT; 1 Prv 

SETPO;1 Open Hdr Shar Prv 

SETRIGHTS; 1 Prv 

SHOW; 1 Open Hdr Shar Prv 

SHWCLSTR; 1 Open Hdr Shar Prv 

SUBMIT; 1 Open Hdr Shar Prv 

SYSMAN;1 Prv 
SYSSDISK:<SYS0.SYSCOMMON.SYSLIB>.EXE 

ANALIMDMPSHR; 1 Prv 

CONVSHR; 1 

DCLTABLES; 1 Open Hdr Shar Lnkbl 

LIBOTS;1 Open Hdr Shar Lnkbl Resid 

LIBRTL; 1 Open Hdr Shar Lnkbl Resid 

MAILSHR; 1 Open Hdr Shar Lnkbl 


@ File specification of the known image 


@ Attribute of known image, as follows: 
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Attribute Meaning 

ACNT Image accounting is enabled for the image 
(//ACCOUNTING). 

+CMODE Image is in compatibility mode, set by the VAX—11 RSX 
Linker. 

HDR Image header is permanently resident (/HEADER_ 
RESIDENT). 

LNKBL Image is not executable; it is a shareable (linkable) 
image set by the OpenVMS Linker. 

NOPURG Image cannot be removed by a purge operation; it 
can only be removed by a delete or remove operation 
(/NOPURGE). 

OPEN Image is permanently open (/OPEN). 

PROT Image contains protected code (/(PROTECTED). 

PRV Image has privileges (/PRIVILEGE=). 

RESID Image is resident ((RESIDENT). 

SHAR Image is shared (SHARED). 

*SHM Image has global sections installed in shared memory 
(SHARED). 

WRT Image is writable ((WRITABLE). 

XONLY Only execute access to image is allowed (/EXECUTE_ 
ONLY). 

TVAX specific 

tAXP specific 


INSTALL> LIST/RESIDENT 


The command in this AXP example displays a single-line description of all 
resident images. The description includes the location in memory and the size 
of the code sections. 

System Resident Sections 


SYSS$DISK:<SYS0.SYSCOMMON.SYSLIB>.EXE 


Base VA End VA Length 
DISMNTSHR; 1 

80180000 80183000 00003000 
INITSSHR;1 

80184000 80184600 00000600 

80186000 8018FA00  00009A00 

80190000 80190600 00000600 
LIBOTS; 1 

8022A000 80230C00 00006C00 
LIBRTL; 1 

801C0000 80229600 00069600 
MOUNTSHR; 1 

80192000 80198400 00006400 

8019A000 801BCC00 00022C00 

801BE000 801BF400 00001400¢ 


3. 


INSTALL 
LIST 


INSTALL> LIST/FULL LOGINOUT 


The command in this example displays a multiline description of the known 
image LOGINOUT. 


SYSSDISK:<SYS0.SYSCOMMON.SYSEXE>.EXE 


LOGINOUT; 3 Open Hdr Shar Priv 
Entry access count = 44 
Current / Maximum shared 3/50 
Global section count 20 
Privileges = CMKRNL SYSNAM TMPMBX EXQUOTA SYSPRV 0 


@ Number of times known file entry has been accessed by this node since it 
became known. 


© First number indicates the current count of concurrent accesses of the 
known file. The second number indicates the highest count of concurrent 
accesses of the file since it was installed. This number appears only if the 
image is installed with the /OPEN qualifier. 


© Number of global sections created for the known file; appears only if the 
image is installed with the (SHARED qualifier. 


© Translation of the privilege mask; appears only if the image is installed 
with privileges. 

INSTALL> LIST/GLOBAL 

The command in this example displays all global sections for shared images. 


System Global Sections @ 


LBRSHR 004 @ (01000001) © wrt @ erm @ sys © Pagent/Refent=1/0@ 
CRFSHR_003 (010003E8) WRT PRM Sys Pagent/Refcnt=1/1 


27 Global Sections Used, 828/3268 Global Pages Used/Unused @ 
@ Display of global sections in memory. 
® Name of global section. 


© Version number (in hexadecimal) of global section; for shareable 
images only, the high-order byte (01 in CRFSHR_003) contains major 
identification, and low-order bytes (0003E8 in CRFSHR_0038) contain 
minor identification determined by the programmer at link time. For 
executable images, the number is a known unique value determined by 
the system. 


© Global section is writable. 


@ Global section is permanent; TMP indicates a temporary global section, 
which would be created by a program other than the Install utility. 


@ Global section is systemwide; GRP and a group number indicate a 
groupwide section, which would be created by a program other than 
Install. 


@ Number of pages (VAX) or pagelets (AXP) in the section and number 
of page table entries currently mapped to this global section. See the 
OpenVMS System Services Reference Manual for a detailed discussion. 
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© Number of global sections created, number of global pages used, and 
number of global pages unused in local memory. Note that, because of 
arithmetic rounding, the number of global sections created will sometimes 
be greater than the SYSGEN parameter GBLSECTIONS. When the size 
of the system header is being computed, the values of the GBLSECTIONS 
and SYSMWCNT parameters are combined with the size of the fixed part 
of the process header. The result is rounded up to the next page boundary. 
This rounding process sometimes adds space to the global section table, 
depending on the values of the two SYSGEN parameters and the amount 
of system paging that preceded the running of INSTALL to create all of 
the global sections. 


5. INSTALL> LIST/GLOBAL/FULL 


The command in this example displays a complete listing of global sections 
for shared images. The /FULL qualifier adds owner and protection codes to 
the display. 


System Global Sections 
NM_MAILSHR_003 (741A6919) PRM SYS Pagent/Refcnt=10/0 
NM MAILSHR 002 (741A6919) PRM SYS Pagcnt/Refcnt=1/0 
NM_MAILSHR_001 (741A6919) PRM SYS Pagcnt/Refcnt=11/0 
Owner: [1,4] @ 
Protection: S:RWED,O:RWED,G:RWED,W:RE 2 ] 


@ UIC of the owner of the global section 
® Type of access allowed for the image 


PURGE 


Deletes all known file entries for images installed without the /NOPURGE 
qualifier. 


Format 
PURGE 


Parameters 


None. 


Qualifiers 


None. 


Description 


The PURGE command deletes all known file entries for images installed without 
the /NOPURGE qualifier. 
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Example 


REMOVE 


Format 


Parameter 


Qualifiers 


Description 


Example 


INSTALL 
PURGE 


If a process is accessing global sections when the PURGE command is entered, 
the global sections are deleted only after the operation initiated by the process 
completes. However, once the command is entered, no additional processes can 
access the global sections because they are marked for deletion. 


INSTALL> PURGE 


The command in this example deletes all images except those installed with the 
/NOPURGE qualifier. The image files remain unaffected. Writable global sections 
are written back to disk upon their removal as known images. 


Removes an entry from the known image file list. The REMOVE command is 
identical to the DELETE command. 


REMOVE _file-spec 


file-spec 
Names the file specification of the known image file entry. 


None. 


The REMOVE command deletes an entry that appears in the known image file 
list. The image’s entry on the known file list and any global sections for the 
image are deleted. The image file remains unaffected. Writable global sections 
are written back to disk upon their removal as known images. 


If a process is accessing global sections when the REMOVE command is entered, 
the global sections are deleted only after the operation initiated by the process 
completes. However, once the command is entered, no additional processes can 
access the global sections because they are marked for deletion. 


INSTALL> REMOVE GRPCOMM 


The command in this example deletes the entry for the known image GRPCOMM 
from the known image file list. 
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INSTALL 
REPLACE 


REPLACE 


Format 


Parameter 


Qualifiers 
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Associates a known image with the latest version of the image file, or modifies 
the attributes of an installed image. 


REPLACE file-spec 


file-spec 
Names the file specification of an image installed as a known image. 


/ACCOUNTING 

/NOACCOUNTING (default) 

Enables image-level accounting for selected images even if image accounting 

is disabled on the local node (by using the DCL command SET ACCOUNTING 
/DISABLE=IMAGE). When image accounting is enabled on the local node, it logs 
all images, and the /NOACCOUNTING qualifier has no effect. 


/EXECUTE_ONLY 

/NOEXECUTE_ONLY 

The /EXECUTE_ONLY qualifier is meaningful only to main programs. It allows 
the image to activate shareable images to which the user has EXECUTE access 
but has no READ access. All shareable images referenced by the program must 
be installed, and OpenVMS RMS uses trusted logical names, those created for 
use in EXEC or KERNEL mode. 


You cannot specify this qualifier for an executable image linked with the 
/TRACEBACK qualifier. 


/HEADER_RESIDENT 

/NOHEADER_RESIDENT 

Installs the file as a known image with a permanently resident header (native 
mode images only). The image is made permanently open even if /OPEN is not 
specified. 


/LOG 

/NOLOG 

Lists the newly created known file entry along with any associated global sections 
created by the installation. 


/OPEN 
/NOOPEN 
Installs the file as a permanently open known image. 


/PRIVILEGED[=(priv-namef]....])] 

/NOPRIVILEGED[=(priv-name[,...])] 

Installs the file as a known image with the privileges specified. Then, if the 
image is not located on the system volume, the image is made permanently open 
even if /OPEN is not specified. For a complete listing of privileges, see the ADD 
command. 


AXP . 


Description 


INSTALL 
REPLACE 


The /PRIVILEGED qualifier applies only to executable images. 


You cannot specify this qualifier for an executable image linked with the 
/TRACEBACK qualifier. 


/PROTECTED 

/NOPROTECTED 

Installs the file as a known image that is protected from user-mode and 
supervisor-mode write access. You can only write into the image from EXEC 
or KERNEL mode. The /PROTECTED qualifier together with the /SHARE 
qualifier are used to implement user-written services, which become privileged 
shareable images. 


/PURGE 

/NOPURGE 

Specifies that the image can be removed by a purge operation; if you do not 
specify /PURGE, it can be removed only by a delete or remove operation. The 
/NOPURGE qualifier is the default form of the qualifier. 


/RESIDENT 

On AXP systems, causes the image code sections to be placed in the granularity 
hint code region and optionally compresses the image data sections, which remain 
located in process space. The image must be linked using the /SHARE and the 
/SECTION_BINDING=CODE qualifiers. ¢ 


/SHARED 

/NOSHARED 

Installs the file as a shared known image and causes creation of global sections 
for the image. The image is made permanently open even if /OPEN is not 
specified. 


/WRITABLE 

/NOWRITABLE 

Installs the file as a writable known image as long as you also specify the 
/SHARED qualifier. The /(WRITABLE qualifier is automatically negated if the 
/NOSHARED qualifier is specified. 


The REPLACE command updates a known file to the latest version found in the 
specified directory. 


You can use the REPLACE command to modify the attributes of currently 
installed images. Either specify new qualifiers, or change the value of qualifiers 
used when installing the image with the ADD (or CREATE) command. If you 
specify no qualifiers, the new image retains the same attributes as the old one. If 
the old image was installed with the /SHARED qualifier, the global sections are 
recreated, probably with new identifiers. 


If a process is accessing global sections when the REPLACE command is entered, 
the global sections are deleted only after the operation initiated by the process 
completes. However, once the command is entered, no additional processes can 
access the global sections because they are marked for deletion. 
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INSTALL 
REPLACE 


Example 


10-20 


INSTALL> REPLACE GRPCOMM /ACCOUNTING/NOOPEN 


The command in this example replaces the known image GRPCOMM with the 
latest version of the image, while enabling image accounting and removing the 
OPEN attribute from this version. 


The full name of the file specification is assumed to be 
SYS$SYSTEM:GRPCOMM.EXE. 
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LAT Control Program (LATCP) Utility 





LATCP Description 


~The LAT Control Program (LATCP) utility is used to configure and control the 
LAT software on OpenVMS systems. You can use LATCP to: 


¢ Specify operational characteristics for your node and its services 

¢ Turn the state of the LAT port driver (LTDRIVER) on and off 

e Display the status of LAT services and service nodes in the network 
¢ Display the status of links created on your LAT node 

¢ Display the status of your LAT node 

e Show and zero LAT counters 

¢ Create, delete, and manage LAT ports 


¢ Recall previously entered LATCP commands so that you can execute them 
again without having to retype them 


e Create subprocesses so that you can execute DCL commands without exiting 
from LATCP 
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LATCP Usage Summary 


Format 


LATCP allows you to control the LAT software on a node and to obtain 
information from it. For example, you can use LATCP to create services on the 
local node, to associate a port on the local node with a service or device on a 
remote terminal server, and to display information about services offered on the 
local node or on other nodes in the network. 


When you use LATCP commands to change LAT characteristics (such as 
creating a service and associating a port with a service), the changes take effect 
immediately. However, when the LAT port driver stops, these characteristics are 
lost. If you want these characteristics to be present the next time you start the 
LAT port driver, edit LAT$SYSTARTUP.COM by modifying or adding commands 
to set these characteristics. Then, invoke LAT$STARTUP.COM to start the LAT 
port driver. (See the OpenVMS System Manager’s Manual for more information.) 


RUN SYS$SYSTEM:LATCP 


Command Qualifiers Defaults 
None. None. 
Parameters 

None. 


Usage Summary 
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To invoke LATCP, enter RUN SYS$SYSTEM:LATCP at the DCL command 
prompt. At the LATCP> prompt, you can enter any of the LATCP commands 
described in the following section. 


To exit from LATCP, enter the EXIT command at the LATCP> prompt or press 
Ctrl/Z. 


LATCP Commands 


This section describes and provides examples of the following LATCP commands: 


ATTACH 


LATCP 


Table 11-1 Summary of LATCP Commands 


Command 


ATTACH 


CREATE LINK 
CREATE PORT 
CREATE SERVICE 
DEFINE/KEY 
DELETE LINK 
DELETE PORT 
DELETE SERVICE 
EXIT 

HELP 

RECALL 


REFRESH 


SET LINK 
SET NODE 
SET PORT 


SET SERVICE 
SHOW LINK 
SHOW NODE 
SHOW PORT 
SHOW SERVICE 
SPAWN 

ZERO COUNTERS 


Function 


Transfers control from your current process to the specified 
process. 


Creates LAT data links. 

Creates an application port or dedicated port. 

Creates a service on a service node. 

Assigns a command string to a function key on your keypad. 
Deletes a LAT data link from a node. 

Deletes an application port or dedicated port. 

Deletes a service on a service node. 

Returns the user to DCL command level. 

Displays help text for LATCP commands. 


Recalls LATCP commands that you entered previously so that 
you can execute them again. 


Refreshes your display screen, for example, after your display 
has been overwritten by output from some other source. 


Modifies characteristics of LAT data links. 
Specifies LAT characteristics for a node. 


Maps a logical port on a node to either a remote device on a 
terminal server or a special application service on a remote LAT 
service node. 


Changes service characteristics. 

Displays the characteristics of links on your node. 

Displays the characteristics of nodes. 

Displays port characteristics. 

Displays characteristics of LAT services known to your node. 
Creates a subprocess. 


Resets the node counters, service counters, and link counters 
maintained by your node. 


Transfers control from your current process to the specified process. The LATCP 
ATTACH command is similar to the DCL ATTACH command. For example, from 
the DCL command level you can enter the DCL SPAWN command to create a 
LATCP subprocess without ending your DCL session, execute several LATCP 
commands at the LATCP prompt, then use the ATTACH command to return to 


DCL. 
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LATCP 
ATTACH 


Format 


Parameter 


Qualifier 


Description 


Example 
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ATTACH [process-name] 


process-name 

Specifies the name of a parent process or spawned subprocess to which control 
passes. The process must already exist, be part of your current job, and share the 
same input stream as your current process. 


Process names can contain from 1 to 15 alphanumeric characters. If a connection 
to the specified process cannot be made, LATCP displays an error message. 


If you specify the /PID qualifier, do not use the process name parameter. If you 
omit the /PID qualifier, you must use the process name parameter. 


To display processes, use the DCL SHOW SYSTEM command. 


/PID=pid 

Specifies the process identification (PID) of the process that will have terminal 
control. When you specify a PID, you can omit the leading zeros. If you specify a 
PID, do not use the process name parameter. If you omit the PID qualifier, you 
must use the process name parameter. 


The ATTACH command allows you to connect your input stream to another 
process. You can use ATTACH to change control from one process to another. 
For example, you can use ATTACH to change control from LATCP to the DCL 
command level (see the following example). While you are at the DCL command 
level, LATCP remains in a hibernation state until you use ATTACH to return to 
it. 


You cannot use this command if you are logged in to a captive account. (A captive 
account is an account set up to restrict user access to the system. You cannot 
access the DCL command level from a captive account.) You cannot specify both a 
process name and the /PID qualifier. 


$ SET PROCESS/NAME="TOP_LEVEL" 
$ SPAWN RUN SYS$SYSTEM:LATCP 
LATCP> SHOW NODE/ALL 


LATCP> ATTACH "TOP_LEVEL" 


In this example, the user enters the DCL SPAWN command to create a LATCP 
subprocess and uses LATCP to display the status of all nodes known to the local 
node. After using LATCP, the user enters the ATTACH command to return to the 
DCL command level. 


LATCP 
CREATE LINK 


CREATE LINK 


Format 


Parameter 


Qualifiers 


Creates the LAT data links, which are connections to LAN devices, such as 
Ethernet or FDDI (fiber distributed data interconnect) controllers, that you want 
your node to use. You must have OPER privilege to use this command. 


CREATE LINK _link-name - 


link-name 
Specifies a name for a LAT data link. A link name can have up to 16 ASCII 
characters. The characters allowed are as follows: 


e Alphanumeric characters: A—Z, a—z, 0—9 . 
e A subset of the international character set: ASCII codes 192—253 


¢ Punctuation characters: dollar sign ($), hyphen (-), period (.), and underscore 


(_) 


You can create a maximum of eight links on your local node. Use the SHOW 
LINK command for a list of the link names that are defined for your node. 


/DECNET 

/NODECNET 

Directs LAT protocol to use the DECnet data link address ((DECNET) or the 
hardware address (/(NODECNET) when starting the LAN controller. If you do 
not specify the /DECNET or /NODECNET qualifier, the default is that the LAT 
protocol will use the DECnet data link address. 


/DEVICE=device-name 

Specifies the LAN controller device name for a LAT data link (for example, 
XEBO:). Only one LAT data link can be associated with a LAN controller. If 
you enter the CREATE LINK command without the /DEVICE qualifier, LATCP 
attempts to find an available controller by using a list of possible LAT data link 
device names. Digital advises that you specify a default device name by defining 
the LAT$DEVICE logical name. 


/LOG 

INOLOG 

Specifies whether LATCP displays a message confirming that the link was 
created. If you do not specify the /LOG or /NOLOG qualifier, the default is that 
no message will be displayed. 


/STATE=option 
Specifies whether the link will be available for use. There are two options for 
STATE: 


ON Specifies that the created link will be available for use with the LAT 
protocol running. 
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LATCP 


CREATE LINK 


Description 


Example 


OFF Specifies that the created link will not be available for use. 


If you do not specify the /STATE=option qualifier, the default is that the created 
link will be available for use (ON). 


The CREATE LINK command creates a link, or connection, for an OpenVMS 
node and a local area network (LAN) device (for example, an Ethernet or FDDI 
controller) and assigns a name to that link. An OpenVMS node can have eight 
LAN links. Each link must operate on a separate LAN controller and have its 
own LAN hardware. 


If you do not explicitly create a link with this command before entering the 
SET NODE/STATE=ON command, LATCP automatically creates a link for you. 
LATCP names the link LAT$LINK and assigns it to the first available LAN 
controller or LAT$DEVICE, if defined. To establish additional links, use the 
CREATE LINK command. 


Whenever you create a link, specify the LAN controller device name. 


Use the SET LINK command to modify link characteristics. 


LATCP> CREATE LINK NETWORK_A /DEVICE=XEBO: /STATE=ON 


The CREATE LINK command in this example creates an Ethernet link named 
NETWORK_A. It specifies the Ethernet controller device XEBO for that link. The 
link will be available for use. 


CREATE PORT 


Format 


Parameter 
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Creates a logical port on your local node that connects with a remote device on 
a terminal server. Alternatively, this command creates a logical port on your 
local node that connects with a specific service. The service can be offered by a 
terminal server or associated with one or more dedicated ports on a remote LAT 
service node. 


You must have OPER privilege to use this command. 


CREATE PORT [port-name] 


port-name 

Specifies the port name in the form LTAn:, where n is a unique number from 1 
through 9999. If the port you specify already exists, LATCP returns the following 
error message: 


$LAT-W-CMDERROR, error reported by command executor 
-SYSTEM-F-DUPLNAM, duplicate name 


Qualifiers 


LATCP 
CREATE PORT 


If you do not specify the port name, you must specify the /LOGICAL qualifier. 


Note 


Digital recommends that you assign a logical name when creating a port, 
instead of specifying a specific LTA device. 


/APPLICATION 

Specifies that a logical port on your node is an application port. It can be 
used to connect to a remote device (typically a printer) on a terminal server 
or to a dedicated port on another LAT service node. If you do not specify 
either the /APPLICATION or /DEDICATED qualifier, the default port type is 
APPLICATION. 


/DEDICATED 

Specifies that a logical port on your local node is dedicated to an application 
service. When users on a terminal server (or on another node that supports 
outgoing connections) request a connection to this service name, they are 
connected to the dedicated port. See the OpenVMS I/O User’s Reference Manual 
for a description of programming an application service. 


After creating a dedicated port on a node, use the SET PORT /SERVICE 
command to map this port to a service. If you do not specify either /DEDICATED 
or /APPLICATION, the default port type will be APPLICATION. 


/LOG 

INOLOG 

Specifies whether LATCP displays a message confirming that the port was 
created. If you do not specify the /LOG or /NOLOG qualifier, the default is that 
no message will be displayed. 


/LOGICAL=(NAME=logical-name[, TABLE=table][, MODE=mode)]) 
Specifies a logical name to be associated with the actual name of the created port. 
You must specify a logical name if you do not specify a port name. 


Note 


If you have sufficient privileges to create a port, but lack the privilege to 
assign a logical name, the port will still be created. 


You can specify one of the following options for the TABLE keyword: 


GROUP Places the logical name in the group logical name table. You 
must have GRPNAM or SYSPRV privilege to place the logical 
name in the group logical name table. 


JOB Places the logical name in the jobwide logical name table. 


PROCESS Places the logical name in the process logical name table. This 
is the default. 
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LATCP 


CREATE PORT 


Description 
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SYSTEM Places the logical name in the system logical name table. You 
must have SYSNAM or SYSPRV privilege to place a name in 
the system logical name table. 


You can also specify the name of a specific table. For example, you could specify 
LNM$PROCESS, which would be the equivalent of specifying PROCESS. 


There are also several options for the MODE keyword, as follows: 


EXECUTIVE Creates an executive mode logical name. You must have 
SYSNAM privilege to create an executive mode logical name. 


SUPERVISOR Creates a supervisor mode logical name. 
USER Creates a user mode logical name. 


The access mode associated with the logical name is determined by maximizing 
the access mode of the caller with the access mode specified by the MODE 
keyword: the mode with the lower privilege is used. 


You cannot specify an access mode with a privilege higher than that of the table 
containing the logical name. However, if your process has SYSNAM privilege, 
then the specified access mode is associated with the logical name regardless of 
the access mode of the caller. 


If you omit the MODE keyword, the access mode of the caller is associated with 
the logical name. 


The CREATE PORT command creates a logical LAT port for your local node. 
You can set up the port as an application port that is later mapped to a remote 
printer (or other device) on a server, or you can set up the port to be mapped to a 
dedicated port on a remote LAT service node. See Example 1. 


Alternatively, you can set up the port as a dedicated port for a special service on 
a LAT service node. See Example 2. 


After creating a port, use the SET PORT command to associate (map) the 

port with a queue or a service. (See the discussion that follows Example 1.) 
Ordinarily, you create and set ports in the LAT site-specific startup procedure, 
LAT$SYSTARTUP.COM. See the OpenVMS System Manager’s Manual for more 
details. 


Note 


When using the CREATE PORT command to create an application port 
(for example, CREATE PORT LTA5001: /APPLICATION), you might 
receive an error message similar to the following: 


$LAT-W-CMDERROR, error reported by command executor 

-SYSTEM-F-DUPLNAM, duplicate name 

This error occurs because the LAT application port that -you are trying 
to create has already been created by some other application. That other 


application could be LATCP itself because LATCP’s port, LATCP$MGMT_ 
PORT, is used to communicate with LTDRIVER. 


You can avoid creating duplicate ports in two ways: 
¢ Use the SET NODE/DEVICE_SEED command to move the lower 


boundary of the device unit number range beyond the LTA devices 
that you are intending to use as application ports. (By default, LTA 


Examples 


LATCP 
CREATE PORT 


device units that originate from the $ASSIGN system service to LTAO: 
have unit numbers that fall within a range from 1 through 9999.) For 
example, if you know that all LTA devices from LTA7000: onward are 
not used as application ports, you could enter the following commands: 


LATCP> SET NODE/DEVICE_SEED=7000 
LATCP> CREATE PORT LTA5001:/APPLICATION 


LATCP> CREATE PORT LTA5010:/APPLICATION 


For more information, see the description of the /DEVICE_SEED 
qualifier in the SET NODE reference section. 


e Execute the LATCP command SET NODE/STATE=ON (either 
interactively or in a program) before any LTA application or 
dedicated ports are created. Because every LATCP management 
port (LATCP$MGMT_PORT) that was created by the previous LATCP 
invocation is deleted, there will be no conflict with LAT application 
ports or dedicated ports that are created anew. 


For more information, see the description of the /STATE qualifier in 
the SET NODE reference section. 


LATCP> CREATE PORT LTA22: /APPLICATION 


The CREATE PORT command in this example creates an application port 
named LTA22: on a service node. You can associate the port with a specific 
printer on a terminal server (use the SET PORT /NODE /PORT command) 
or with a set of printers on a terminal server (use the SET PORT /NODE 
/SERVICE command). Or, you can associate the port with a dedicated port 
on a remote service node. In this case, use the SET PORT /NODE /SERVICE 
command, where the /SERVICE qualifier specifies an application service 
associated with a dedicated port on the remote node. See the examples for 
the SET PORT command. 


LATCP> CREATE PORT LTA21: /DEDICATED 


The CREATE PORT command in this example creates the LTA21: port. It 
will be used as a dedicated port that offers a specific service rather than a 
general timesharing service. 


LATCP> CREATE PORT /LOG /APPLICATION - 
_LATCP> /LOGICAL=(NAME=MAIL PORT, TABLE=PROCESS, MODE=SUPERVISOR) 


The CREATE PORT command in this example creates an application port. 
It assigns the name of the new port to the specified logical name (MAIL_ 
PORT). The logical is created as a supervisor mode logical name in the 
LNM$PROCESS_TABLE logical name table. LATCP displays a confirmation 
message. 
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LATCP 


CREATE SERVICE 


CREATE SERVICE 


Format 


Parameter 


Qualifiers 
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Creates a service on a service node. You must have OPER privilege to use this 
command. 


CREATE SERVICE [service-name] 


service-name 
Specifies a LAT service name. By default, a service name is the name of the local 
node you defined with the SET NODE command. 


The service name can be from 1 to 16 ASCII characters in length. The characters 
allowed are as follows: 


¢ Alphanumeric characters: A—Z, a—z, 0—9 
e <A subset of the international character set: ASCII codes 192—253 


¢ Punctuation characters: dollar sign ($), hyphen (-), period (.), and underscore 


() 


/APPLICATION 

Specifies that the created service is an application service. An application service. 
offers a specific application on the service node rather than a general interactive 
service. You can define a dedicated port for the service by using the CREATE 
PORT and SET PORT commands. 


ADENTIFICATION[="identification-string"] 

Describes and identifies a service. Service nodes include the identification string 
in service announcements. A service node announces its services at regular 
intervals established with the SET NODE command. Entering the LATCP 
SHOW NODE command or the DECserver SHOW NODE command generates 

a display that includes this identification string. By default, the identification 
string is a translation of SYS$ANNOUNCE. 


You cannot specify more than 64 ASCII characters in an identification string (a 
SYS$ANNOUNCE longer than that will be truncated to the first 64 characters). 
Enclose the string in quotation marks ("). 


/LOG 

/NOLOG 

Specifies whether LATCP displays a message confirming that the service was 
created. If you do not specify the /LOG or /NOLOG qualifier, the default is that 
no message will be displayed. 


/STATIC_RATING=rating 

/NOSTATIC_RATING 

Enables or disables dynamic service ratings. A dynamic service rating means that 
a LAT algorithm calculates the availability of a service dynamically, based on the 
overall level of activity of the node that offers the service, the amount of memory, 
and the processor type. When a terminal server or node requests a connection 


Description 


LATCP 
CREATE SERVICE 


to a service that is offered on two or more service nodes, the requesting node 
selects the service node with the highest (most favorable) service rating. This 
selection process is called load balancing. The dynamic service rating, which is 
the default, is usually adequate for efficient load balancing on the LAT network. 


When you use the /STATIC_RATING qualifier, you disable dynamic service 
ratings so that you can specify a static (fixed) rating. Use the static rating to 
direct users away from or toward your node temporarily. Static ratings range 
from 0 to 255. Specify a low value to make the local service node less likely to be 
used; specify a high value to make the local service node more likely to be used. 


If you do not specify either the /STATIC_RATING or /NOSTATIC_RATING 
qualifier, the default is that the LAT software uses the dynamic service rating. 


The CREATE SERVICE command creates a service that a service node offers 
to terminal servers (and nodes that support outgoing connections) on the LAT 
network. The service can be a general timesharing service that offers all the 

resources of the service node, or it can be an application service that offers a 

specific application on the service node. The number of services that you can 
create with the CREATE SERVICE command depends on the availability and 
capability of specific resources. 


The following table lists the maximum number of services your node can offer 
and still be recognized by the DECserver terminal server, depending on the model 
number. 


Maximum Number of Services 


DECserver Terminal Server Offered by Node 
Model 100 8 
Model 200 64 
Model 300 64 
Model 90TL 64 
Model 700 64 
Model 500 127 
Note 


If you create more than the maximum number of services supported by a 
specific DECserver model, that server will not recognize your node. 


To create an application service, use the /APPLICATION qualifier. In addition, 
define a dedicated port by using the CREATE PORT and SET PORT commands. 
Most often, a system manager creates services in LAT$SYSTARTUP.COM, the 
site-specific LAT configuration procedure. (See the OpenVMS System Manager’s 
Manual for further information on creating an application service. The OpenVMS 
I/O User’s Reference Manual shows how to program an application service.) 


Several service nodes can share one service name. A shared service name is 
especially useful in a cluster environment because it allows the cluster to be 
known by a single cluster name. When a user logs in, the terminal server 
connects to the least busy node offering that service. 
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LATCP 


CREATE SERVICE 


You can modify the service characteristics with the SET SERVICE command. 


Examples 


DEFINE/KEY 


LATCP> CREATE SERVICE/STATIC_RATING=195 SALES 


The CREATE SERVICE command in this example creates the service 
SALES on a service node. This command assigns a static rating of 195 so 
terminal servers (and nodes that support outgoing connections) can assess the 
availability of services on the node. 


LATCP> CREATE SERVICE/APPLICATION GRAPHICS 


This command creates the service GRAPHICS on the local node. Use 
the CREATE PORT/DEDICATED and SET PORT/SERVICE=GRAPHICS 
commands to create a port that is dedicated to this service. 


Assigns a command string to a function key. For example, you can assign the 
LATCP SHOW NODE command to a function key. 


Format 


DEFINE/KEY key-name equivalence-string 


Parameters 


key-name 
Specifies the name of the function key that you want to define. Valid key names 
are as follows: 


Key Name 


PF1 

PF2 

PF3 

PF4 

KPO-KP9 
PERIOD 
COMMA 
MINUS 

Enter 

FIND 
INSERT_HERE 
REMOVE 
SELECT 
PREV_SCREEN 
NEXT_SCREEN 
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LK201 Keyboard 


PF1 

PF2 

PF3 

PF4 

Keypad 0-9 
Keypad period (.) 
Keypad comma (,) 
Keypad minus (-) 
Enter 

Find 

Insert Here 
Remove 

Select 

Prev Screen 
Next Screen 


VT100-Type 


PF1 

PF2 

PF3 

PF4 

Keypad 0-9 
Keypad period (.) 
Keypad comma (,) 
Keypad minus (-) 
Enter 


VT52-Type 


Blue 
Red 
Black 


Keypad 0-9 


Enter 


Key Name 


HELP 
DO 
F6-F20 


Qualifiers 


LATCP 


DEFINE/KEY 
LK201 Keyboard VT100-Type VT52-Type 
Help = = 
Do - — 
F6-F20 _ _ 


equivalence-string 
Specifies the command string that you want assigned to the function key. To 
preserve spaces and lowercase characters, enclose the string in quotation marks 


("). 


/ECHO 

/INOECHO 

Specifies whether LATCP displays the command string on your screen when you 
press the key. If you do not specify the /KCHO or /NOECHO qualifier, the default 
is that the command string will be displayed. You cannot use /NOECHO with the 
/NOTERMINATE qualifier. 


A\F_STATE=state-name 

Specifies the state that must be set (for example, the GOLD state) for the key 
definition to work. Lets you assign alternative meanings to keys when the 
specified state is set. See the discussion of the /SET_STATE qualifier. If you omit 
the /IF_STATE qualifier, LATCP uses the current state. The state name is an 
alphanumeric string. States are established with the /SET_STATE qualifier. 


/LOCK_STATE 

/INOLOCK_STATE 

Specifies that the state set by the /SET_STATE qualifier remain in effect until 
explicitly changed. If you use the /NOLOCK_STATE qualifier, the state set by 
/SET_STATE remains in effect only for the next definable key that you press or 
for the next read-terminating character (such as Return or Ctrl/Z) that you type. 


You can specify the /LOCK_STATE qualifier only with the /SET_STATE qualifier. 
If you do not specify the /LOCK_STATE or /NOLOCK_STATE qualifier, the 
default is that the state set by the /SET_STATE qualifier remains in effect until 
explicitly changed. 


/LOG 

INOLOG 

Specifies whether LATCP displays a message confirming that the command was 
executed. If you do not specify the /LOG or /NOLOG qualifier, the default is that 
no message will be displayed. 


/SET_STATE=state-name 

Causes the specified state to be set when you press the defined key. The state 
name can be any alphanumeric string (for example, GOLD). Use the DEFINE 
/KEY/IF_STATE=state-name command to associate new meanings for keys when 
the specified state is set. See the example for the DEFINE/KEY command. 


If you omit the /SET_STATE qualifier, the current state that was locked remains 
in effect. 
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DEFINE/KEY 


Description 


Example 


‘TERMINATE 

/NOTERMINATE 

Specifies whether the command string will be terminated (processed) when you 
press the function key. The default is /(NOTERMINATE, which allows you to 
press other keys before the command string is processed. Pressing Return has 
the same effect as using /TERMINATE. 


The /NOTERMINATE qualifier allows you to create key definitions that insert 
text into command lines, after prompts, or into other text that you are typing. 


The DEFINE/KEY command assigns a command string to a function key so that 
when you press that key, the command is executed. 


LATCP> DEFINE/KEY PF4 "SHOW NODE " /NOTERMINATE/SET_STATE=GOLD 
LATCP> DEFINE/KEY PF4 "/ALL"/ IF_STATE=GOLD/ TERMINATE 


The first DEFINE/KEY command in this example assigns the SHOW NODE 
command to function key PF4. To process the SHOW NODE command, you must 
press Return after pressing PF4. Note the space after the word NODE in the 
first DEFINE/KEY command. This space allows you to enter a node name after 
pressing PF4. When you press Return, the SHOW NODE command is processed. 
If the space is omitted, LATCP does not recognize the command (SHOW NODE). 
The state is set to GOLD; that state will be in effect for the next key that you 
press. 


The second DEFINE/KEY command defines the use of the PF4 key when the 
keypad is in the GOLD state. When you press PF4 twice, the SHOW NODE/ALL 
command is processed. 


DELETE LINK 


Format 


Parameter 


Qualifiers 
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Deletes a logical link from a node. You must have OPER privilege to use this 
command. 


DELETE LINK | link-name 


link-name 
Specifies the name of the link that you want to delete. 


Use the SHOW LINK command for a list of the links that are defined for your 
node. 


/LOG 


Description 


Example 


LATCP 
DELETE LINK 


INOLOG 

Specifies whether LATCP displays a message confirming that the link was 
deleted. If you do not specify the /LOG or /NOLOG qualifier, the default is that 
no message will be displayed. 


The DELETE LINK command stops any active sessions on the link and then 
deletes the link from your node. 


LATCP> DELETE LINK NETWORK A /LOG 


The DELETE LINK command in this example deletes the link NETWORK_A. 
The link was created with the CREATE LINK command. 


DELETE PORT 


Format 


Parameter 


Qualifiers 


Description 


Example 


Deletes a logical port from a node. You must have OPER privilege to use this 
command. 


DELETE PORT port-name 


port-name 

Specifies the name of the application port or the dedicated port that you want 
to delete. An application port connects to a remote device on a terminal server, 
whereas a dedicated port connects to a special service. 


Use the SHOW PORT command for a list of the application ports and the 
dedicated ports that are defined for your service node. You cannot use the 
DELETE PORT command to delete an interactive or forward LAT port. 


/LOG 

INOLOG 

Specifies whether LATCP displays a message confirming that the port was 
deleted. If you do not specify the /LOG or /NOLOG qualifier, the default is that 
no message will be displayed. 


The DELETE PORT command stops any active session on the port and then 
deletes the port from your service node. 


LATCP> DELETE PORT LTA27: 


The DELETE PORT command in this example deletes the LTA27: application 
port. The port was created with the CREATE PORT command. 
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DELETE SERVICE 


DELETE SERVICE 


Format 


Parameter 


Qualifiers 


Description 


Example 


EXIT 


Format 
Parameters 


Example 
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Deletes a service that your service node currently offers. You must have OPER 
privilege to use this command. 


DELETE SERVICE § service-name 


service-name 
Specifies the name of the service, as displayed by the SHOW SERVICE command. 


/LOG 

INOLOG 

Specifies whether LATCP displays a message confirming that the service was 
deleted. If you do not specify the /LOG or /NOLOG qualifier, the default is that 
no message will be displayed. 


The DELETE SERVICE command removes a service from a service node. The 
service is no longer available to terminal server users and is no longer multicast 
in the configuration messages sent by your service node. Existing connections to 
the service node are not affected. 


LATCP> DELETE SERVICE SALES 


The DELETE SERVICE command in this example removes the service SALES 
from your service node. The service is no longer available to server users. 


Stops execution of LATCP and returns control to the DCL command level. You 
can also enter Ctrl/Z at any time to exit. 


EXIT 


None. 


LATCP> EXIT 


The EXIT command in this example exits the LATCP program and returns 
control to the DCL command level. 


HELP 


Format 


Parameter 


Description 


Example 


RECALL 


Format 


Parameter 


LATCP 
HELP 


Provides online help information for using the LATCP commands. 


HELP [command-name...] 


command-name 

The name of a LATCP command or LATCP command and command keyword. 
If you enter the HELP command with a command name only, such as HELP 
SET, LATCP displays a list of all of the command keywords used with the SET 
command. 


The HELP command is an online reference for LATCP commands. After you 
view an initial help display, press Return. The help display stops and the LATCP 
prompt is displayed. If you do not specify a command name, the HELP command 
displays general information on the commands for which help is available. 
Supplying a command name obtains syntax information for that command. 


LATCP> HELP SET PORT 


In this example, the HELP SET PORT command produces a description of the 
SET PORT command and shows the command format. 


Displays previously entered LATCP commands on the screen so that you can 
execute them again. 


RECALL [command-specifier] 


command-specifier 

Specifies the number or the first several characters of the LATCP command you 
want to recall. Command numbers can range from 1 to 20. The most recently 
entered command is number 1. 


Use the /ALL qualifier to display all the commands in the RECALL buffer, 
along with their command number so that you can determine the number of the 
command that you want to recall. 


If you do not include the command specifier or the /ALL qualifier when entering ~ 
the RECALL command, LATCP displays the last command. 
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RECALL 


Qualifiers 


Description 


Examples 


REFRESH 


Format 


Description 


Example 
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/ALL 
Specifies that LATCP display all the commands in the RECALL buffer. LATCP 
displays the number of each command. 


When you enter a LATCP command, LATCP stores it in a RECALL buffer for 
later use with the RECALL command. The RECALL command itself is never 
stored in the RECALL buffer. 


When you use the RECALL command, LATCP displays the recalled command 
but does not process it. If you want the command processed as it appears, press 
Return. You can use the command line editing facility to make minor changes 
in the command line and then press Return to process the revised version of the 
command. 


1. LATCP> RECALL 2 


In this example, the RECALL command recalls the second-to-last command 
you entered. 


2. LATCP> RECALL SET 


In this example, the RECALL command recalls the last SET command you 
entered. 


Refreshes the display screen so that any output from some other source (such as 
a broadcast message) is erased from the screen. 


REFRESH 


Use the REFRESH command to refresh your display screen after output from 
other sources has overwritten the display screen. For example, if a broadcast 
message from a terminal server user is displayed on your screen, use the 
REFRESH screen to erase the broadcast message from the display. By default, 
you can refresh your screen by pressing Ctrl/W at the LATCP prompt. 


LATCP> REFRESH 


In this example, the REFRESH command refreshes the display on your screen. 


SET LINK 


Format 


Parameter 


Qualifiers 


Description 


LATCP 
SET LINK 


Changes the characteristics of LAT data links. You must have OPER privilege to 
use this command. 


SET LINK | link-name 


link-name 
Specifies the name for a LAT data link. A link name can have up to 16 ASCII 
characters. The characters allowed are as follows: 


e Alphanumeric characters: A—Z, a—z, 0—9 
e A subset of the international character set: ASCII codes 192—253 


¢ Punctuation characters: dollar sign ($), hyphen (-), period (.), and underscore 


(_) 
The SHOW LINK command displays the names of the links defined for a node. 


/LOG 

/NOLOG 

Specifies whether LATCP displays a message confirming that the link’s 
characteristics were modified. If you do not specify the /LOG or /NOLOG 
qualifier, the default is that no message will be displayed. 


/STATE=option 
Specifies availability of the link for use. There are two options for STATE: 


ON Specifies that the link will be available for use with the LAT 
protocol running. 
OFF Specifies that the link will not be available for use. 


If you do not specify the /STATE=option qualifier, the default is that the link will 
be available (ON). 


The SET LINK command allows you to change the characteristics for a LAT data 
link, which must have been created previously in one of the following ways: 


¢ Interactively entering the CREATE LINK command 


¢ Using the SET NODE/STATE=ON command to create a default link named 
LAT$LINK (if no other links are created when that command executes) 


e Running a program that creates links 
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SET LINK 


Example 


SET NODE 


Format 


Parameter 


Qualifiers 


11-22 


LATCP> SET LINK NETWORK_A /LOG /STATE=ON 


The SET LINK command in this example directs LATCP to start the controller 
for link NETWORK_A and then to display a confirmation message. 


Specifies the LAT characteristics of your local node. You must have OPER 
privilege to use this command. 


SET NODE _[node-name] 


node-name 

Specifies a node name for your local node. By default, the node name is the 
translation of SYS$NODE. A LAT node name should be the same as the DECnet 
node name. If the node is not running DECnet but will be in the future, Digital 
recommends that you define SYS$NODE and use it for both DECnet and LAT 
node names. 


A LAT node name can be from 1 to 16 ASCII characters. The characters allowed 
are as follows: 


e Alphanumeric characters: A—Z, a—z, 0—9 
e A subset of the international character set: ASCII codes 192—253 


e Punctuation characters: dollar sign ($), hyphen (-), period (.), and underscore 


(_) 


/CIRCUIT_TIMER[=msecs] 
Allows you to control the interval in milliseconds (msecs) between messages sent 
from the local node to other service nodes or terminal servers while connections 


to those nodes are active. Use this qualifier only if your node allows outgoing 
connections /CONNECTIONS=OUTGOING_ONLY or /CONNECTIONS=BOTH). 


A low value for the interval decreases the response time for the port but increases 
the demand on service nodes. Set the circuit timer in the range of 10 to 1000 
msecs. 


The default value of 80 msecs gives a generally acceptable response time while 
creating a moderately low overhead on the service nodes. You cannot change this 
parameter when there are active or pending LAT connections. 


/CONNECTIONS=option 
Allows you to specify the type of connections permissible on the local node. There 
are four options for CONNECTIONS: 


LATCP 
SET NODE 


INCOMING_ONLY Specifies that the local node permit incoming connections 
only. 

OUTGOING_ONLY Specifies that the local node permit outgoing connections 
only. Specify this on systems that can tolerate the 
overhead associated with outgoing connections, such as 
standalone systems. 


BOTH Specifies that the local node permit both incoming and 
outgoing connections. Specify this on systems that 
can tolerate the overhead associated with outgoing 
connections, such as standalone systems. 


NONE Specifies that the local node disallow both incoming and 
outgoing connections. 


If you do not specify the /CONNECTIONS<=option qualifier, the default is that the 
node will permit incoming connections only. 


/CPU_RATING=cpu-power 

/NOCPU_RATING 

The /CPU_RATING qualifier assigns your local node a rating that represents the 

power of your node’s CPU (central processing unit) relative to other CPUs in the 

LAN. The value of cpu-power can range from 1 (for a CPU with the lowest power) 
to 100 (for a CPU with the highest power). 


The local node’s LAT driver uses this value to calculate the dynamic service 
rating for each service offered on the local node. When a terminal server or node 
requests a connection to a service that is offered on the local node and one or 
more other service nodes, the requesting node selects the service node with the 
highest (most favorable) service rating. This selection process is called load 
balancing. 


Specify the /CPU_RATING qualifier to influence the service ratings calculated for 
services on your node. If you specify a high value for cpu-power, the LAT driver 
will calculate a relatively high service rating for services on your node (service 
ratings as high as 255 are possible). If you specify a low value, the LAT driver 
will calculate relatively low service ratings; connections will most likely be made 
to the same service that is offered on other nodes. In either case, the LAT driver 
can calculate a greater range of values for dynamic service ratings (the entire 
range from 0 to 255). Consequently, the ratings will more accurately reflect the 
availability of the service node. 


By default, the LAT driver calculates a dynamic rating based on the estimated 
CPU power of the local node. If you do not modify the default by specifying the 
/CPU_RATING qualifier, or if you specify the /NOCPU_RATING qualifier, services 
offered on the local node will generally have lower ratings than services offered 
on nodes having more powerful CPUs. Other factors involved in the rating 
calculation, such as available memory and current CPU usage, can further reduce 
the ratings for local services. 


For example, if your local node has low CPU power (relative to the range of CPU 
powers available with your processors) but is the most powerful CPU that is 
usually available in the LAN, you can assign a high value to the /CPU_RATING 
qualifier. Then, higher service ratings will be given to the services offered on 
your node. If you do not specify the /CPU_RATING qualifier, the service ratings 
calculated for your local node might be far below the maximum possible value of 
255. 
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If you do not specify either the /CPU_RATING=cpu-power or /NOCPU_RATING 
qualifier, the default is that no CPU rating will be used (the LAT driver will 
instead base the rating on the estimated CPU power of the local node). A value 
of 0 indicates no CPU rating. 


/DEVICE_SEED[=value] 

Sets the default starting number (within a range from 1 through 9999) for the 
unit numbers that will be assigned to new LTA devices. Note that when ports are 
created by assigning a channel to LTAO: with the $ASSIGN system service, the 
channel numbers fall in this same range. 


The default device seed value is approximately half of the maximum unit number 
(which you set by using the /UNIT_NUMBER_MAXIMUM qualifier). Interactive 
LAT ports, and those created with the CREATE PORT/LOGICAL command, 

are assigned unit numbers beginning with the specified device seed value and 
continuing up to the maximum unit number. When the maximum unit number 
is reached, the port is assigned the next available unit number beginning at the 
bottom of the range (LTA1:). 


Note that each time you specify the /UNIT_.NUMBER_MAXIMUM qualifier, the 
device seed value is reset to approximately half of the newly specified maximum 
unit number. 


/FORWARD_SESSION_LIMIT[=value] 
Controls the number of sessions (a value within a range from 16 through 255) 
allowed on each outgoing connection. By default, 16 sessions are allowed on an 


outgoing connection, which means that 16 individual processes can direct the 
DCL command, SET HOST/LAT, to the same remote node. 


You must increase the value for the /FORWARD_SESSION_LIMIT qualifier if 
a user on your system enters the DCL command, SET HOST/LAT, and receives 
an error message indicating that the session limit for the LAT circuit has been 
reached (%LAT-F-VCSESLIM). Note, however, that you can change this value 
only when no connections exist. 


/GROUPS=option....] 

Gives the listed groups access to services offered on your local node or prevents 
the listed groups from accessing services offered on your local node, depending on 
the options used. 


A network manager organizes terminal server nodes into groups based on the 
number of terminal server nodes in the LAT network. Groups subdivide the LAT 
network, limiting the number of terminal server nodes that can connect with a 
given service node. 


There can be as many as 256 groups, numbered 0 through 255. By default, all 
terminal server nodes and nodes supporting outgoing connections belong to group 
0. If you enter one group code, you can omit the parentheses. Use the SHOW 
NODE command for a list of the groups enabled for your service node. 


There are several options for the (GROUPS qualifier. For each option described, 
there are two ways to specify more than one group: 


e List them separated by commas 


e Specify a range 


LATCP 


SET NODE 
The available options are as follows: 
ENABLE=group-codef[,...] Gives the listed groups access to your service 
node. 
DISABLE=group-codel,...] Prevents the listed groups from accessing your 


service node. The listed groups had been enabled 
previously for access to your node. 


ENABLE=group-codel,...], This option lets you enable certain groups and 
DISABLE=group-codel,...] disable other groups in one command line: gives 
access to the groups listed with the ENABLE 
option and removes access from the groups 
listed with the DISABLE option. Enclose both 
ENABLE and DISABLE in parentheses; for 
- example, /GROUP=(ENABLE=(10,12), 
DISABLE=(1-30)). 


Example 2 shows how to specify the /GROUPS qualifier with the SET NODE 
command. 


ADENTIFICATION[="identification-string"] 

Describes and identifies a node. Service nodes include the identification string in 
service announcements. A service node announces its services at regular intervals 
established with the SET NODE command. Entering the LATCP SHOW NODE 
command or the DECserver SHOW NODE command generates a display that 
includes this identification string. By default, the identification string is the 
translation of SYS$ANNOUNCE. 


You cannot specify more than 64 ASCII characters in an identification string (a 
SYS$ANNOUNCE longer than that will be truncated to the first 64 characters). 
Enclose the string in quotation marks ("). 


/KEEPALIVE_TIMER[=secs] 

Allows you to control the maximum interval between idle run messages sent by 
your local node to another service node to which it has a LAT connection. The 
interval is in seconds. Your node sends these messages when no other traffic is 
being generated over the virtual circuit. If the service node acknowledges these 
messages, your node will continue to monitor the status of the circuit. If your 
node does not receive acknowledgment, it responds as if the circuit is down. 


Use this qualifier only if your node allows outgoing connections 
(/CONNECTIONS=OUTGOING_ONLY or /CONNECTIONS=BOTH). 


The default value is 20. Digital recommends this value for normal LAN 
environments. For a heavily loaded LAN, consider using a higher value. Set the 
timer in the range of 10 to 255. For applications that require quick notification 
and possible failover of a service node failure, use a lower value. You cannot 
change this value if there are active or pending connections. 


/LOG 

INOLOG 

_ Specifies whether LATCP displays a message confirming that the node’s 
characteristics were modified. If you do not specify the /LOG or /NOLOG 
qualifier, the default is that no message will be displayed. 
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/MULTICAST_TIMER[=secs] 

Specifies the time, in seconds, between multicast messages sent by a service 
node. A multicast message announces the services offered by a service node. The 
minimum value is 10 seconds; the maximum is 180 seconds. The default value is 
60. 


/NODE_LIMIT=value 
/NONODE_LIMIT 
Specifies the maximum number of service nodes that your local node can store in 


its service and node database. Use this qualifier only if your node allows outgoing 
connections ((CONNECTIONS=OUTGOING_ONLY or /CONNECTIONS=BOTH). 


When the database reaches the node limit, no more nodes are added to the 
database when your local node receives service announcement messages. You can 
ensure that the node limit is not reached by using the /USER_GROUPS qualifier 
to restrict access from the local node to other service nodes on the network. 


If you do not specify either the /NODE_LIMIT=value or /NONODE_LIMIT 
qualifier, the default is no limit. A value of 0 indicates no limit. 


/RETRANSMIT_LIMIT[=count] 

Specifies the number of times your local node repeats transmission of a 
message to a service node after a transmission fails. If the transmission is 

still unsuccessful after these attempts, the virtual circuit between your local 
node and the service node terminates, along with all sessions associated with the 
virtual circuit. 


Use this qualifier only if your node allows outgoing connections 


(//CONNECTIONS=OUTGOING_ONLY or /CONNECTIONS=BOTH). 


Specify a value in the range of 4 to 120. The default is 8. The value you choose 
depends on the type of physical link used for your network, as well as the amount 
of traffic on the network. See your network manager for a suggested value. You 
cannot change this value if there are active or pending connections. 


/SERVICE_RESPONDER 

/NOSERVICE_RESPONDER 

Specifies whether your system responds to special LAT multicast messages that 
request service information. Some terminal servers do not have their own service 
and node database. When a user on such a terminal server requests a connection 
to a service, the server sends a LAT multicast message requesting names of 
nodes that offer the requested service. Service responder nodes reply with the 
requested information. 


If you specify /SERVICE_RESPONDER, your system responds to the special LAT 
multicast messages. (If you specify /NOSERVICE_RESPONDER, your system 
does not respond to those messages.) Digital recommends that you set up only one 
or two nodes in the LAN as service responder nodes. The nodes should have the 
largest databases in the LAN. Use this option only if your node allows outgoing 
connections ((CONNECTIONS=OUTGOING_ONLY or /CONNECTIONS=BOTH). 


If you do not specify either the /SERVICE_RESPONDER or /NOSERVICE_ 
RESPONDER qualifier, the default is that your system will not respond to the 
special LAT multicast messages. 


LATCP 
SET NODE 


/SESSION_LIMIT=option 

Specifies the maximum number of simultaneous sessions across all local-access 
ports. This limit does not affect the use of dedicated and application ports. It 
affects interactive port creation only, limiting the amount of resources consumed 
by interactive users creating new sessions. 


There are several options for the /SESSION_LIMIT qualifier: 


INCOMING=value Sets the session limit for incoming 
connections only. The default is 
no limit (a value of 0). 


OUTGOING=value Sets the session limit for outgoing 
connections only. The default is 
no limit (a value of 0). 


INCOMING=value,OUTGOING=value Sets the limit for both 
outgoing and incoming 
connections. Enclose both 
options in parentheses; 
for example, /SESSION_ 
LIMIT=(INCOMING=20, 
OUTGOING=25). 


e A high limit allows users to have more sessions but increases memory 
utilization on your local node. 


¢ A low limit decreases memory utilization on your local node but limits user 
access to services on the network. 


If the limit is reached, interactive users cannot create new sessions. In this case, 
you need to increase the session limit or disconnect any connections that are no 
longer being used. 


Specify a value in the range of 0 to 255. Specifying 0 leaves no limit on the 
number of sessions that can be created. To prevent sessions from being created, 
use the /CONNECTIONS qualifier. 


If you do not specify the /SESSION_LIMIT qualifier, the default is that there will 
be no limit on the number of incoming and outgoing sessions. 


/STATE=option 
Specifies whether LAT connections are allowed. There are three options for 
STATE: 


ON Starts the LAT port driver (and LAT protocol software) on your 
node. 
Digital strongly recommends that the LATCP command SET 
NODE/STATE=ON be executed before any LTA application 
or dedicated ports are created (use the format provided in 
SYS$MANAGER:LAT$SYSTARTUP.TEMPLATE) for two reasons: 
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OFF 


SHUT 


e It ensures that LTDRIVER will delete any leftover LTA devices 
that have a reference count of 0 and are explicitly marked for 
deletion (using the $DASSGN system service or the LATCP 
DELETE PORT command, for example). Because every LATCP 
management port (LATCP$MGMT_PORT) that was created 
by the previous LATCP invocation is deleted, there will be no 
conflicts with LAT application ports or dedicated ports that are 
created anew. 


e The deletion of leftover LTA devices with a reference count of 0 
minimizes the use of nonpaged pool memory. 


Stops the LAT port driver (and LAT protocol software) on 
your node. Any existing LAT connections are aborted. Any 
characteristics that you changed or set with LATCP are lost. 

To start the LAT protocol on your node again, invoke 
LAT$STARTUP.COM. (See the OpenVMS System Manager’s 
Manual for more information.) The LAT characteristics defined 
in LAT$SYSTARTUP.COM will take effect. 


Specifies that new LAT connections cannot be created on your local 
node, but existing connections may continue. The LAT protocol 
continues running only until the last active session disconnects, 
(after which LTDRIVER will stop). At that time, your node changes 
to the OFF state. 


Caution 


If you stop the LAT software by specifying either the SET NODE 
/STATE=OFF or SET NODE/STATE=SHUT command, the LAT print 
symbiont (LATSYM) will shut down all print queues that it is processing. 
The system will then generate an OPCOM message indicating that the 
print queues are stopped. You must manually restart those print queues. 


If you do not specify the /STATE=option qualifier, the default is that the LAT port 
driver and LAT protocol software on your node will be started (ON). 


/UNIT_NUMBER_MAXIMUM=value 

Specifies the maximum unit number for a LAT device. For example, if you specify 
140, then LTA140: will be the device with the highest unit number. Specify 

a value that is high enough to accommodate all devices that may be in use 
simultaneously. When the number of devices in use exceeds the value you specify, 
the system gives certain LAT devices unit numbers that exceed your maximum. 


Note the following as well: 


e When LATCP reaches the maximum unit number, it will continue to implicitly 
create LTA devices beginning with the lowest available unit number. 


e You cannot use the System Generation (SYSGEN) utility to set the maximum 
unit number for a LAT device. 


Description 


LATCP 
SET NODE 


The range of maximum unit numbers is 99 through 9999. The default is 9999. 
Note that each time you specify the /UNIT.NUMBER_MAXIMUM qualifier, 
the LTA device seed value is reset to approximately half of the newly specified 
maximum unit number. — 


/USER_GROUPS=option[....] 

Restricts access (from the local node) to service nodes in the network that belong 
to the specified groups. Your local node can access only those service nodes 
associated with the user groups specified. The /USER_GROUPS qualifier also 
serves to limit the number of nodes stored in your node’s node database. (The 
local node only stores information about the nodes and services that belong to at 
least one of the specified user groups.) By default, all LAT service nodes belong to 


group 0. 


This qualifier affects your local node when outgoing connections are enabled 
(/(CONNECTIONS=OUTGOING_ONLY or /CONNECTIONS=BOTH). 


Use the SHOW NODE command for a list of the user groups (service groups) 
enabled for your node. 


There are several options for the /USER_GROUPS qualifier. For each option 
described here, there are two ways to specify more than one group: 


¢ List them separated by commas 
e Specify a range 


The available options are as follows: 


ENABLE=group-codef,...] Gives your node access to the listed user groups. 

DISABLE=group-codef,...] Prevents your node from accessing the listed 
groups. The listed groups were enabled 
previously. 

ENABLE=group-codef,...], This option lets you enable certain groups and 

DISABLE=group-codel,...] disable other groups in one command line: 


gives your node access to the groups listed 
with the ENABLE option and prevents your 
node from accessing the groups listed with 
the DISABLE option. Enclose both ENABLE 
and DISABLE in parentheses; for example, 
/GROUP=(ENABLE=(10,12), 
DISABLE=(1-30)). 


The SET NODE command, which is typically executed in the site-specific LAT 
configuration command procedure, LAT$SYSTARTUP.COM, allows you to specify 
such characteristics as: 


e Node name 

¢ Node identification 

e Service and user groups 

¢ Timing of service announcements 

e The maximum number of LAT sessions allowed simultaneously on the node 


¢ The maximum number of outgoing sessions and incoming interactive sessions 
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Examples 


Because LATCP commands change characteristics dynamically (that is, the 
commands take effect immediately), you can use the SET NODE command any 
time the LAT port driver is active. These changes remain in effect until the LAT 
port driver stops. To make sure the changes take effect when you start the LAT 
port driver again, edit LAT$SYSTARTUP.COM to include these changes. Start 
the LAT port driver by invoking LAT$SYSTARTUP.COM. (See the OpenVMS 
System Manager’s Manual.) The OpenVMS System Manager’s Manual contains 
additional information about the LAT network in general and service nodes in 
particular. 


Note 


The SET NODE command must be executed first (after LTDRIVER is 
loaded and the LATACP is started) to ensure that other management 
commands execute properly thereafter. 


1, LATCP> SET NODE DUKE /IDENT="NODE DUKE, SALES VMSCLUSTER" 


The SET NODE command in this example specifies node name DUKE for your 
local node. The identification string "NODE DUKE, SALES VMSCLUSTER’ is 
multicast from node DUKE. . 


2. LATCP> SET NODE /MULTICAST_TIMER=50 /GROUPS=(ENABLE=(1-3,8,11) , DISABLE=5) 


The SET NODE command in this example causes your local node to send 
multicast messages every 50 seconds to announce DUKE’s services to terminal 
servers. The command also enables groups 1, 2, 3, 8, and 11 for access to the 
local node, and it disables group 5 from accessing the local node. Group 5 had 
been previously enabled. 


3, LATCP> SET NODE /CONNECTIONS=BOTH /USER_GROUPS=(ENABLE=(24, 121-127) ,DISABLE=0) 


The SET NODE command in this example sets up your local node to allow both 
incoming and outgoing connections. Users on your local node can access those 
service nodes belonging to user groups 24 and 121 through 127. Users cannot 
access service nodes in user group 0. 


4, LATCP> SET NODE /CIRCUIT TIMER=80 /KEEPALIVE TIMER=20 - 
_LATCP> /RETRANSMIT LIMIT=20 /CONNECTIONS=BOTH /MULTICAST TIMER=60- 
_LATCP> /GROUPS=(DISABLE=0 , ENABLE=7 3 ) /SESSION_LIMIT=(OUTGOING=10, INCOMING=0) 
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The SET NODE command in this example sets many characteristics at once for 
node DUKE. 


SET PORT 


Format 


Parameter 


Qualifiers 


LATCP 
SET PORT 


Associates a logical port on the local node with a remote port on a terminal server 
that supports a device. Alternatively, it associates a logical port on the local 
node with a specific service. The service can be offered by a terminal server or 
associated with one or more dedicated ports on a remote LAT service node. 


You must have OPER privilege to use this command. 
SET PORT port-name 


port-name 
Specifies the name of the port. A port name must be in the form LTAn:, where n 
is a unique number from 1 through 9999. 


/APPLICATION 

Specifies that a port on the local node is an application port, logically associated 
with a port on a terminal server or a dedicated port on another LAT service node. 
The terminal server port supports a device (for example, a printer). If the port is 
used to support a printer, the print queue is established in a startup command 
procedure. See the OpenVMS System Manager’s Manual for a description of 
configuring remote printers on a terminal server 


If you do not specify either the /APPLICATION or /DEDICATED qualifier, the 
default port type is APPLICATION. 


To create a port, use one of the following methods: 

e Interactively enter the CREATE PORT command 
e Run a program that creates ports 

/DEDICATED 


Specifies that a logical port on your local node is dedicated to an application 
service. The /DEDICATED qualifier requires the /SERVICE qualifier. 


To set up an application service for a logical port on a LAT service node: 


1. Create the service by specifying the CREATE SERVICE/APPLICATION 
command and then define the dedicated port by specifying the CREATE 
PORT/DEDICATED command. You can include these commands in 
LAT$SYSTARTUP.COM. 


2. Associate the dedicated ports with the service by specifying the SET PORT 
/DEDICATED/SERVICE command. 


3. Start the application program. Within the program, allocate dedicated ports 


with the same name as those defined in LAT$SYSTARTUP.COM. 
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[LOG 

/INOLOG 

Specifies whether LATCP displays a message confirming that the port’s 
characteristics were modified. If you do not specify the /LOG or /NOLOG 
qualifier, the default is that no message will be displayed. 


/NODE=remote-node-name 

Specifies the name of a terminal server (or a remote node that supports outgoing 
connections) to be logically associated with the specified application port on 
your node. The server supports a remote device. Note that you can set up an 
application port on your local node and associate the port with a dedicated port 
on a remote LAT service node. The remote port is dedicated to an application 
service. 


/PASSWORD=remote-password 
Specifies the password required to access a remote service that is logically 
associated with the specified application port. 


/PORT=remote-port-name 

Specifies the name of the remote port on a terminal server that supports a 
remote device, or specifies the name of a remote port dedicated to an application 
service on a remote LAT service node. In either case, the remote port is logically 
associated with the specified application port on your local node. 


/QUEUED 

/NOQUEUED 

Specifies queued or nonqueued access to the server port. A queued or nonqueued 
request is accepted by a terminal server if a remote port is free. If the remote 
port is busy and queuing is enabled on the terminal server, then the server 
queues the remote request. If you do not want your remote requests to be queued 
on the server, specify /NOQUEUED. 


If you do not specify either the /QUEUED or /NOQUEUED qualifier, the default 
is that there will be queued access to the server port. 


/SERVICE=service-name 
Specifies either of the following: 


¢ The name of the remote service offered at a terminal server port that will be 
associated with the specified application port (APPLICATION) on the local 
node 


e A service name for an application program being offered on a dedicated port 
(/DEDICATED) on a LAT service node 


To specify the name of a remote service offered at a terminal server port, use the 
/NODE and /SERVICE qualifiers. To specify a particular port for a service, use 
the /NODE, /PORT, and /SERVICE qualifiers. Ask the terminal server manager 
for these names. 


To name a service for a particular application program to be offered locally on 

a dedicated port, use the /DEDICATED and /SERVICE qualifiers. (The service 
must have been created with the CREATE SERVICE command.) Assign only one 
service to a dedicated port, but note that several ports can have the same service 
assigned. 


Description 


Examples 


LATCP 
SET PORT 


The SET PORT command associates an application port on your local node with 
a port or service on a terminal server. When you associate an application port 
with a service on a terminal server, you allow access to any of the ports (printers) 
represented by that service. See Example 1 and Example 2. The application port 
must have been created with the CREATE PORT/APPLICATION command. 


The SET PORT command can also associate a dedicated port on the local node 
with an application service offered locally. The service must already exist. See 
Example 3. Use the /DEDICATED and /SERVICE qualifiers with the SET PORT 


command. 


The SET PORT command can also associate an application port on your local 
node with an application service associated with one or more dedicated ports on a 
remote LAT service node. This service is offered to users on terminal servers or 
on nodes that support outgoing connections. See Example 4. The dedicated port 
must have been created with the CREATE PORT/DEDICATED command. 


See the examples for the SHOW PORT command for displays that reflect the 
changes made by the following SET PORT command examples. 


1. LATCP> SET PORT LTA22: /APPLICATION /NODE=TS33EW /PORT=LN02 


The SET PORT command in this example sets up port LTA22: as an 
application port to be associated with the port named LNO2 on the terminal 
server named TS33EW. This command associates port LTA22: with a 
specific printer on the server. In the next example, the SET PORT command 
associates a port with a set of printers (designated by the service name 
PRINTER) on a terminal server. 


2. LATCP> SET PORT LTA19: /APPLICATION /NODE=TLAT1 /SERVICE=PRINTER /QUEUED 


The SET PORT command in this example shows how to associate a local 
logical port with a service (several printers) on a terminal server. The 
command associates the application port LTA19: with the service PRINTER 
on terminal server TLAT1. The service PRINTER can be associated with one 
or more ports on TLAT1. The /QUEUED qualifier specifies that the server 
offering the service PRINTER can queue the remote connection request if all 
ports offering the service are in use. See the description of print operations in 
the OpenVMS System Manager’s Manual for information on setting up print 
queues. 


8. LATCP> SET PORT LTA21: /DEDICATED /SERVICE=GRAPHICS 


The SET PORT command in this example specifies that the application port 
LTA21: on the local service node offers the service GRAPHICS to users on 
terminal servers or on nodes that support outgoing connections. GRAPHICS 
is a particular utility or application program. 
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4, LATCP> SET PORT MAIL PORT /SERVICE=MAIL/NODE=RMNODE 
The SET PORT command in this example associates the port whose logical 
name is MAIL _PORT with the dedicated service MAIL on remote node 
RMNODE. The port logically named MAIL_PORT was created with the 
CREATE PORT command (see Example 3 in the discussion of the CREATE 
PORT command). The logical name could also have been created with an 
OpenVMS DCL ASSIGN or DEFINE command. On node RMNODE, a port 
must be dedicated to the service MAIL by using the SET PORT port-name 
/DEDICATED/SERVICE=MAIL command. 
SET SERVICE 
Dynamically changes the characteristics of a locally offered service. You must 
have OPER privilege to use this command. 
Format 
SET SERVICE §[service-name] 
Parameter 
service-name 
Specifies the service whose characteristics are to be modified. If a service name 
is omitted, the default service name is the name of the local node you defined by 
using the SET NODE command. 
Qualifiers 
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/APPLICATION 

Sets up the service as an application service. An application service offers a 
specific application on the service node rather than all of the resources on the 
service node. Define a dedicated port for the service by using the CREATE PORT 
and SET PORT commands. 


ADENTIFICATION[="identification-string"] 

Describes and identifies a service. Service nodes include the identification string 
in service announcements. A service node announces its services at regular 
intervals established with the SET NODE command. Entering the LATCP 
SHOW NODE command or the DECserver SHOW NODE command generates a 
display that includes this identification string. 


By default, the identification string is the translation of SYS$ANNOUNCE. A 
service node announces its services at regular intervals established with the SET 
NODE command. 


You cannot specify more than 64 ASCII characters in an identification string (a 
SYS$ANNOUNCE longer than that will be truncated to the first 64 characters). 
Enclose the string in quotation marks ("). 


/LOG 

/NOLOG 

Specifies whether or not LATCP displays a message confirming that the command 
was executed. If you do not specify the /LOG or /NOLOG qualifier, the default is 
that no message will be displayed. 


LATCP 
SET SERVICE 


/ISTATIC_RATINGe=rating 

/NOSTATIC_RATING 

Enables or disables dynamic service ratings. A dynamic service rating means that 
a LAT algorithm calculates the availability of a service dynamically, based on the 
overall level of activity of the node that offers the service, the amount of memory, 
and the processor type. When a terminal server or node requests a connection to 
a service that is offered on two or more service nodes, the requesting node selects 
the service node with the highest (most favorable) service rating. This selection 
process is called load balancing. 


When you use the /STATIC_RATING qualifier, you disable dynamic service 
ratings so that you can specify a static rating. Use the static rating to direct 
users away from or toward your node temporarily. Static ratings range from 0 to 
255. Specify a low value to make your node less likely to be used; specify a high 
value to make the node more likely to be used. 


If you do not specify either the /STATIC_RATING or /NOSTATIC_RATING 
qualifier, the default is that the LAT software uses the dynamic service rating. 


Description 


The SET SERVICE command dynamically changes the characteristics of a service 
that you created previously (by interactively entering the CREATE SERVICE 
command or by running a program that created services). 


Example 


LATCP> SET SERVICE SALES /IDENT="SALES FORCE TIMESHARING SERVICES" 


The SET SERVICE command in this example specifies a new identification string, 
"SALES FORCE TIMESHARING SERVICES", for the service SALES. This string 
is announced with the service SALES in the multicast messages sent by a service 
node. 


SHOW LINK 
Displays the status and LAT characteristics of links on the local node. 


Format 
SHOW LINK [link-name] 


Parameter 


link-name 
Specifies the name for a LAT data link. A link name can have up to 16 ASCII 
characters. . 


If you do not specify a link name, LATCP displays information about all links 
currently defined for the node. 
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Qualifiers 
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/BRIEF 


Displays the device name and state of the link. This is the default display. 


/COUNTERS 


Displays the device counters kept for the link. The numbers displayed represent 
the values recorded since the last time the counters were reset (when the node 
first started or when the ZERO COUNTERS command was used). 


Do not use the /BRIEF or /FULL qualifier with this qualifier. 


Table 11-2 lists and describes counters common to both CSMA/CD (carrier sense, 
multiple access with collision detect) and FDDI (fiber distributed data interface) 


links. 


Table 11-2 Counters Common to CSMA/CD and FDDI Links 


Counter 


Messages received 
Multicast messages received 
Bytes received 

Multicast bytes received 
System buffer unavailable 


Unrecognized destination 


Messages sent 
Multicast messages sent 


Bytes sent 
Multicast bytes sent 


User buffer unavailable 


Description 


The total number of messages received over the 
link. 


The total number of multicast messages received 
over the link. 

The total number of bytes of information received 
over the link. 

The total number of multicast bytes received over 
the link. 

The total number of times no system buffer was 
available for an incoming frame. 

The total number of times a frame was discarded 
because there was no portal with the protocol 
enabled. This count includes frames received for 
the physical address only. 

The total number of messages sent over the link. 
The total number of multicast messages sent 
over the link. 

The total number of bytes of information sent 
over the link. 

The total number of bytes of multicast messages 
sent over the link. 

The total number of times no user buffer was 
available for an incoming frame that passed all 
filtering. 


(continued on next page) 
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Table 11-2 (Cont.) Counters Common to CSMA/CD and FDDI Links 
Counter Description 


Data overrun The total number of bytes lost on the link’s 
device because the local node’s input buffers 
were full. A nonzero value can indicate noisy 
lines, a bad device, a busy or poorly tuned 
system (not enough resources allocated), or a 
hardware problem with another device on the 
LAN connection. 


Table 11-8 lists and describes receive errors common to both CSMA/CD and FDDI 
links. These errors, which are included in the display generated by the SHOW 
LINK/COUNTERS command, are represented by flags that indicate the error has 
occurred. 


Table 11-3 Receive Errors Common to CSMA/CD and FDDI Links 


Flag Description 

Block check error CRC error in packet(s) received. 

Framing error . Received frame(s) ended incorrectly. 

Frame too long Frame(s) received longer than length limits. 

Frame status error CRC error on ring noticed by local FDDI station 
(FDDI only). 

Frame length error Frame length too short (FDDI only). 


Table 11-4 lists and describes transmit errors common to both CSMA/CD and 
FDDI links. These errors, which are included in the display generated by the 
SHOW LINK/COUNTERS command, are represented by flags that indicate the 
error has occurred. 


Table 11-4 Transmit Errors Common to CSMA/CD and FDDI Links 


Flag Description 

Excessive collisions Frame(s) failed to transmit because the collision 
limit of 16 was reached (CSMA/CD only). 

Carrier check failures Indicates transceiver problem or short circuit in 

cable. 

Short circuit Short circuit in cable. 

Open circuit : Open circuit in cable. 

Frame too long Frame(s) too long. Indicates a transmission 
problem in one of the portals using the link. 

Remote failure to defer A remote station failed to defer frame(s) 
transmission. Could indicate a misconfigured 
network. 


(continued on next page) 
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Table 11-4 (Cont.) Transmit Errors Common to CSMA/CD and FDDI Links 


Flag 


Transmit underrun 


Transmit failure 


Description 


Transmission of a frame was too slow. Indicates 
a hardware controller error. 


Frame(s) failed to transmit. 


Table 11-5 lists and describes link counters specific to CSMA/CD only. 


Table 11-5 CSMA/CD Counters 


Counter 


Transmit CDC failure 


Messages transmitted: 


Description 


The total number of carrier detect check errors, 
that is, the number of times the local node failed 
to detect that another Ethernet station was 
already transmitting when the local node began 
transmitting. 


Single collision—The total number of times 

a frame was successfully transmitted on the 
second attempt after a normal collision on the 
first attempt. 

Multiple collision—The total number of times 
a frame was successfully transmitted on the 
third or later attempt after normal collisions on 
previous attempts. 

Initially deferred—tThe total number of times 
a frame transmission was deferred on its first 
attempt. This counter is used to measure 
Ethernet contention with no collisions. 


Table 11-6 lists and describes link counters specific to FDDI only. 


Table 11-6 FDDI Counters 


Counter 


Ring initializations initiated 
Ring initializations received 


Directed beacons received 
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Description 


The total number of times a ring 
reinitialization was initiated by the 

link. 

The total number of times a ring 
reinitialization was initiated by some 
other link. 

The number of times the link detected the 
directed beacon process. Each invocation 
of the directed beacon process is counted 
only once. 


(continued on next page) 


Table 11-6 (Cont.) FDDI Counters 


Counter 


Connections completed 


Duplicate tokens detected 


Ring purge errors 


LCT rejects 


Elasticity buffer errors 


MAC error count 


Traces initiated 


Traces received 


Ring beacons initiated 


Link errors 


Duplicate address test failures 


FCI strip errors 


LEM rejects 
MAC frame count 


MAC lost count 


/FULL 
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Description 


The number of times the station 
successfully connected to the 
concentrator. 


The number of times a duplicate token 
was detected on the link. 


The number of times the ring purger 
received a token while still in the ring 
purge state. 


Link Confidence Test rejects. Indicates 
a problem with communication between 
station and concentrator. 


Elasticity buffer function errors. 
Indicates a station on the ring with a 
transmit clock out of tolerance. 


The number of times the MAC (Media 
Access Control) changed the E indicator 
in a frame from R to S. 


The number of times the PC-trace process 
was initiated by the link. 


The number of times the link was 
requested to perform the PC-trace 
process. 


The number of times the ring beacon 
process was initiated by the link. 


The number of times the Link Error 
Monitor (LEM) detected an error in 

a received message. Slow counts are 
normal. 

The number of times the link address was 
a duplicate. 

The number of times a Frame Content 
Independent Strip operation was 
terminated by receipt of a token. 

The number of times excessive LEM 
errors were encountered. 

The total number of frames (other than 
tokens) seen by the link. 

The total number of times a frame (other 
than a token) was improperly terminated. 


Displays the device name, state, and datalink address of the link and indicates 
whether the DECnet address is enabled. 
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Description 


Displays information about the specified link or all links if you do not specify a 
link. Depending on the qualifier you use with the SHOW LINK command, you 
can display a link’s device name, state, LAT datalink address, DECnet address, 
or counters. 


Examples 


1, LATCP> SHOW LINK/FULL NETWORK A 


The SHOW LINK command in this example produces the following display of 
information about link NETWORK_A: 

Link Name: NETWORK_A Datalink Address: 08-00-2B-10-12-E3 

Device Name: _ESA7: DECnet Address: Disabled 

Link State: On 


The display in this example gives the device name of link NETWORK_A and 
the device’s hardware address. The link is in the On state. 
2. LATCP> SHOW LINK LINK_A/COUNTERS 


The SHOW LINK command in this example produces the following display of 
counters for link LINK_A: 


Link Name: § LINK_A 
Device Name: _ETA6: 


Seconds Since Zeroed: 65535 
Messages Received: 18582254 Messages Sent: 3550507 
Multicast Msgs Received: 15096805 Multicast Msgs Sent: 413178 
Bytes Received: 1994694325 Bytes Sent: 290838585 
Multicast Bytes Received: 1528077909 Multicast Bytes Sent: 32637472 
System Buffer Unavailable: 8724 User Buffer Unavailable: 6269 
Unrecognized Destination: 0 Data Overrun: 0 
Receive Errors - Transmit Errors - 
Block Check Error: No Excessive Collisions: No 
Framing Error: No Carrier Check Failure: No 
Frame Too Long: No Short Circuit: No 
Frame Status Error: No Open Circuit: No 
Frame Length Error: Yes Frame Too Long: No 
Remote Failure To Defer: No 
Transmit Underrun: No 
Transmit Failure: No 


CSMACD Specific Counters 


Transmit CDC Failure: 0 
Messages Transmitted - 
Single Collision: 43731 
Multiple Collisions: 73252 
Initially Deferred: 164508 
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SHOW NODE 


Format 


Parameter 


Qualifiers 


Displays the status and LAT characteristics of a node. 
SHOW NODE _[node-name] 


node-name 
Specifies the name of the node for which information is displayed. If you do not 
specify a node name, LATCP displays information about the local node. 


/ALL 

Displays information about all nodes known to your local node. When you use 
this qualifier, specify the /FULL or /BRIEF qualifier as well. If you do not specify 
either the /FULL or /BRIEF qualifier, the default display will contain the node 
status and identification string (the display generated by the /BRIEF qualifier). 


/BRIEF 
Displays the node status and identification string. This is the default display if 
you specify the /ALL qualifier. 


/COUNTERS 

Displays the counters kept for the node. Do not use the /BRIEF or /FULL 
qualifier with this qualifier. Table 11-7 lists and describes the counters displayed 
with SHOW NODE/COUNTERS. 


Table 11-7 LAT Node Counters 
Counter Description 


Messages received The total number of LAT messages received by 
the local node. If you specify a remote node with 
the SHOW NODE command, the number of LAT 
messages received from that remote node. 

Messages transmitted The total number of LAT messages transmitted 
by the local node. If you specify a remote node 
with the SHOW NODE command, the number of 
LAT messages transmitted to that remote node. 

Slots received The total number of LAT slots received by the 
local node. If you specify a remote node with 
the SHOW NODE command, the number of 
slots received from that remote node. A slot is 
a message segment that contains information 
corresponding to a single session. 


(continued on next page) 
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Table 11-7 (Cont.) LAT Node Counters 


Counter 


Slots transmitted 


Bytes received 


Bytes transmitted 


Multicast bytes received 
Multicast bytes sent 
Multicast messages received 
Multicast messages sent 

No transmit buffer 


Multicast messages lost 
Multicast send failures 


Controller errors 


Last controller error 
Multiple node addresses 


Duplicates received 


Description 


The total number of LAT slots transmitted by 
the local node. If you specify a remote node with 
the SHOW NODE command, the number of slots 
transmitted to that remote node. 


The total number of bytes of LAT information 
received by the local node. If you specify a 
remote node with the SHOW NODE command, 
the number of bytes received from that remote 
node. 


The total number of bytes of LAT information 
transmitted by the local node. If you specify a 
remote node with the SHOW NODE command, 
the number of bytes transmitted to that remote 
node. 

The total number of LAT multicast bytes received 
by the local node. 

The total number of LAT multicast bytes sent by 
the local node. 

The total number of LAT multicast messages 
received by the local node. 

The total number of LAT multicast messages 
sent by the local node. 

The total number of times no buffer was 
available on the local node for transmission. 

The total number of times LTDRIVER failed to 
process an inbound multicast message because of 
failed communication with the LATACP. 

The total number of times LTDRIVER failed 

to send a multicast message because of failed 
communication with the LATACP. 

The total number of times LTDRIVER failed to 
communicate with the data link controller driver. 


The most recent controller error. 


The total number of times that a node announced 
itself with a physical address different from that 
in a previous announcement. 


The total number of duplicate messages received 
by the local node. If you specify a remote 

node with the SHOW NODE command, the 
number of duplicate messages received from that 
remote node. This counter can indicate a system 
slowdown. 


(continued on next page) 
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Table 11-7 (Cont.) LAT Node Counters 


Counter 


Messages retransmitted 


Illegal messages received 


Illegal slots received 


Solicitations accepted 


Solicitations rejected 


Solicitation failures 
Transmit errors 


Last transmit error 
Virtual circuit timeouts 


Description 


The total number of LAT messages that the 
local node retransmitted because they were not 
acknowledged by terminal servers (or nodes that 
support outgoing connections). If you specify a 
remote node with the SHOW NODE command, 
the number of messages retransmitted to that 
remote node. 


The total number of invalidly formatted LAT 
messages received by the local node. If you 
specify a remote node with the SHOW NODE 
command, the number of invalidly formatted 
messages the local node received from that 
remote node. Illegal messages are grouped into 
several types of protocol errors, which are listed 
at the end of this table. 


The total number of invalidly formatted LAT 
slots received by the local node. If you specify a 
remote node with the SHOW NODE command, 
the number of invalidly formatted slots the local 
node received from that remote node. 


The total number of times a remote node 
accepted solicitations from the local node. If you 
specify a remote node with the SHOW NODE 
command, the number of accepted solicitations 
by that remote node. 


The total number of times a remote node rejected 
solicitation from the local node. If you specify a 
remote node with the SHOW NODE command, 
the number of rejected solicitations by that 
remote node. 

The total number of times solicitations by the 
local node received no response. 

The total number of times the data link failed to 
transmit a LAT message. 

The most recent transmit error. 

The total number of times a LAT circuit to 
another node timed out, indicating that the 
remote node failed to send a valid message in the 
required time span. If you specify a remote node 
with the SHOW NODE command, the number of 
times the local node timed out from a connection 
to that remote node. 


(continued on next page) 
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Table 11-7 (Cont.) LAT Node Counters 
Counter Description 


Discarded output bytes The total number of data bytes that were 


discarded because of an overflow of an internal 
buffer before the data could be output to an LTA 
device. 


User data lost The total number of times LTDRIVER failed to 


allocate resources to buffer session data. User 
data is lost and the session is stopped. 


Resource errors The number of times LTDRIVER was unable to 


allocate system resources. 


Incoming solicits accepted The total number of times the local node accepted 


solicitations from other nodes. 


Incoming solicits rejected The total number of times the local node rejected 


solicitations from other nodes. 


The protocol errors that are counted as illegal messages are as follows. These 
protocol error messages are displayed if their associated counter is greater than 
zero: 


Invalid message type received 

Invalid start message received 

Invalid sequence number received in start message 
Zero-node index received 

Node circuit index out of range 

Node circuit sequence invalid 

Node circuit index no longer valid 

Circuit was forced to halt 

Invalid server slot index 

Invalid node slot index 

Invalid credit field or too many credits used 
Repeat creation of slot by server 


Repeat disconnection of slot by master 


/FULL 

Displays the node’s status, identification string, LAT protocol version, and the 
values of the node’s characteristics. This is the default except when you specify 
the /ALL qualifier. 


Description 


Examples 


LATCP 
SHOW NODE 


This command displays information about a specified node or, if you do not 
specify a node name, about your local node. With the /ALL qualifier, the SHOW 
NODE command displays information about all nodes known to your local node. 
Depending on the qualifiers you use, you can display node counters, node status, 
the node identification string, the LAT protocol version running on the node, and 
the values set for the node’s characteristics. 


1. LATCP> SHOW NODE/FULL 


The SHOW NODE command in this example produces the following display 
of information about the local node: | 
Node Name: LTC LAT Protocol Version: 5.2 


Node State: On 
Node Ident: LTC - Engineering Development 


Incoming Connections: Enabled Incoming Session Limit: None © 
Outgoing Connections: Enabled Outgoing Session Limit: None 
Service Responder: Disabled 

Circuit Timer (msec): 80 Keepalive Timer (sec): 20 
Retransmit Limit (msg): 20 Node Limit (nodes): None 
Multicast Timer (sec): 20 CPU Rating: 8 
Maximum Unit Number: 9999 

User Groups: 43, 73 

Service Groups: 7-9, 13, 23, 40, 43, 45, 66, 72-73, 89, 120-127, 248-255 
Service Name Status Rating Identification 

LTVMS Available 31 D 


This display indicates that the local node LTC is in the On state, which 
means LAT connections can be created on the node. LTC is running Version 
5.2. of the LAT protocol. The identification of the node is "LTC - Engineering 
Development”. Because this is the local node, the display does not give the 
address of a LAN device. Use the SHOW LINK command to find addresses 
of devices on the local node. The display for the status of remote nodes, as 
shown in Example 2, gives the Ethernet address of that node. 


Both incoming and outgoing connections can be made on node LTC, and there 
is no limit to the number of sessions. The display indicates the values of 
various timers and lists the groups that are enabled. Users on the local node 
can access service nodes belonging to user groups 43 and 73. Locally offered 
services can be accessed by nodes belonging to the service groups listed. 


The display indicates that the CPU rating of the local node is 8. The display 

shows that the node offers a service named LTVMS. This service is available 

and its rating is 31 D (dynamic). (An S would indicate the rating is static.) 
2. LATCP> SHOW NODE/FULL RWWUP 


The SHOW NODE command in this example produces the following display 
about the remote node RWWUP: 
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SHOW NODE 


SHOW PORT 


Node Name: RWWUP LAT Protocol Version: 5.2 
Node State: Reachable Address: AA-00-04-00-11-10 
Node Ident: 


Incoming Connections: Enabled 


Circuit Timer (msec): 80 
Multicast Timer (sec): 20 


Service Groups: 7, 13, 42-43, 45, 66, 70-72, 75-82, 88-89 


Service Name Status Rating Identification 
NAC Available 28 ‘ 
SYSMGR Available 28 


This display indicates that remote node RWWUPFP is reachable and runs 
Version 5.2 of the LAT protocol. The display includes the Ethernet address 
of node RWWUP. Because incoming connections are enabled, you can connect 
to a service on node RWWUP, provided that your node belongs to one of the 
service groups listed in the display. 


Node RWWUPFP offers two services: NAC and SYSMGR. Both are available. 


LATCP> SHOW NODE/ALL/BRIEF 


The SHOW NODE command in this example produces the following display 
about all nodes known to the local node: 


Node Name Status Identification 

ABLAN Reachable Unauthorized access is prohibited. 
ASKWEN Reachable . 

CHUNK Reachable A member of the MAIN VMScluster 
UTOO On Can be healthy at the Center 
VULCUN Reachable Beam me up 

ZENX Reachable ZENX 


The SHOW NODE command in this example indicates the status (whether 
a node is reachable) and identification of all nodes known to the local node. 
Note also that the display includes the status of the local node UTOO. The 
status can be either On, Off, or Shut. Here it is On. 


Displays the status and LAT characteristics of ports on the local node. 


Format 


SHOW PORT [port-name] 


Parameter 


port-name 

Specifies the name of the port for which information is displayed. If you do not 
specify a port name, the SHOW PORT command displays the characteristics for 
all LTAn: ports on a node. 


Do not use the /APPLICATION, /DEDICATED, /FORWARD, or /INTERACTIVE 
qualifiers with a specific port name. 
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Qualifiers 


Description 


Example 


LATCP 
SHOW PORT 


/APPLICATION 
Generates a display of all application ports. 


/BRIEF 

Displays port type, port status, and the remote node name, port, and service 
associated with the port. This is the default if you do not specify a port name 
with the SHOW PORT command. 


/DEDICATED 
Generates a display of all dedicated ports. 


/FORWARD 
Generates a display of all LAT ports used for either outgoing LAT connections or 
local LAT management functions. ~ 


/FULL 
This displays the following information. For more details, see the discussion for 
the sample display in the SHOW PORT/FULL example. 


e Port type 
e Port status 
e Target port name, node name, and service name associated with the port 


¢ Remote node name, port, and service associated with the port if a connection 
is currently active 


ANTERACTIVE 
Generates a display of all LAT ports used for incoming interactive connections. 


If a port is an application port, the display lists the remote node name, remote 
port name, and remote service name that you specified in the SET PORT 
command. 


If the port is a dedicated port, the display lists the service name that you specified 
in the SET PORT command. 


If LATCP shows the port as Interactive in the display, a user on a terminal server 
or on a node that supports outgoing LAT connections is currently using the port. 


For all ports with active sessions, the remote node sends its node name and port 
name to your local node. These names are listed in the display. 


LATCP> SHOW PORT /FULL 


The SHOW PORT command in this example produces the following type of 
display. The display reflects the characteristics set by the command examples 
given with the SET PORT command. 
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Local Port Name: _LTAI6: 
Local Port State: Inactive 
Connected Link: 


Target Port Name: 
Target Node Name: 
Target Service Name: 


Local Port Name: —LTA17: 
Local Port State: Active 
Connected Link: LATSLINK 


Target Port Name: 
Target Node Name: 
Target Service Name: 


Local Port Name: _LTA19: 
Local Port State: Active 
Connected Link: LATSLINK 


Target Port Name: 
Target Node Name: TLAT1 
Target Service Name: PRINTER 


Local Port Name: _LTA21: 
Local Port State: Inactive 
Connected Link: 


Target Port Name: 
Target Node Name: 
Target Service Name: GRAPHICS 


Local Port Name: _LTA22: 
Local Port State: Active 


Connected Link: LATSLINK 
Target Port Name: LNO2 
Target Node Name: TS33EW 


Target Service Name: 


Local Port Type: Forward 


Actual Port Name: 


LATCP$MGMT_ PORT Actual Node Name: 


Actual Service Name: 


Local Port Type: Interactive 


Actual Port Name: PORT 1 
Actual Node Name: MY_DS200_ SERVER 
Actual Service Name: 


Local Port Type: Application (Queued) 


Actual Port Name: 
Actual Node Name: TLATI 
Actual Service Name: PRINTER 


Local Port Type: Dedicated 


Actual Port Name: 
Actual Node Name: 
Actual Service Name: 


Local Port Type: Application (Queued) 


Actual Port Name: LNO02 
Actual Node Name: TS33EW 
Actual Service Name: 


The display in this example shows information about all the ports on the local 
node. There are four types of ports. The display shows information for each of 


these types, as follows: 


¢ Forward: a port used for outgoing LAT connections or for executing local 
management functions and LATCP commands. Port LTAI6: is a forward 
port. The display shows that the port is currently inactive, that is, there is 
no current LAT connection. The target node name of LATCP$MGMT_PORT 
indicates that LATCP is using this port to execute the LATCP commands 
entered by the user. If the display listed a node and service name, it would 
mean that the port is being used for an outgoing connection. 


e Interactive: a port created as a result of an incoming LAT connection request 
from another node or terminal server. Port LTA17: is an interactive port 
connected with port PORT_1 on the terminal server MY_DS200_SERVER. 


¢ Application: a port used for solicited connections to devices on terminal 
servers or to application services on remote LAT service nodes. Port LTA22: 
is an application port. The port maps to port LN0O2 (a printer) on a terminal 
server node TS33EW. The display indicates that server TS33EW queues 
connection requests from the local node. Port LTA19: is also an application 
port. The port maps to the service PRINTER on terminal server TLAT1. 


LATCP 
SHOW PORT 


¢ Dedicated: a port dedicated to a local application service. Port LTA21: is 
dedicated to the service GRAPHICS. 


The target port name, target node name, and target service name are the names 
specified with the SET PORT command. They are passed to the remote node or 
terminal server when the connection request is made. 


The actual port name, actual node name, and actual service name are the names 
returned by the remote node when it accepts the connection request. They 

may differ from the corresponding target names (specified with the SET PORT 
command) if the remote node translates the names. For example, terminal 
servers that accept connections to LAT service names usually return the name of 
the port to which the connection was actually directed. 


SHOW SERVICE 


Format 


Parameters 


Qualifiers 


Displays the status and LAT characteristics of LAT services known to the local 
node. 


SHOW SERVICE [service-name] 


service-name 

Specifies the name of the service for which information will be displayed. If you 
do not specify a service name, LATCP displays information about all services 
known to the node. 


/BRIEF 
Displays the status and identification string of the service. 


/COUNTERS 
Displays the counters kept for the service. Do not use the /BRIEF or /FULL 
qualifier with this qualifier. The following table lists and describes the counters: 


Counter Description 
Remote Counters 


Connections attempted The total number of times the local node 
attempted to connect to the service offered on 
a remote node. 


Connections completed The total number of times the local node 
successfully connected to the service offered on 
a remote node. 
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Counter 
Local Counters 


Connections accepted 


Description 


The total number of times the local node accepted 


Description 


Examples 
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a connection request from a remote node to a 
locally offered service. 

The total number of times the local node rejected a 
connection request from a remote node to a locally 
offered service. 


Connections rejected 


/FULL 

Displays the status, identification string, and type of service, and the values set 
for service characteristics. This qualifier also displays the status of all service 
nodes offering the service. 


/LOCAL 
Displays information about services offered by the local node only. You can use 
this qualifier with the /BRIEF, /COUNTERS, or /FULL qualifier. 


This command displays information about services. If you do not specify a service 
name, the command displays information about all services known to your local 
node. If you do not specify a service name but specify the /LOCAL qualifier, the 
command displays information about all services offered by your local node. 


Depending on whether you use the /BRIEF, /COUNTERS, or /FULL qualifier, you 
can display the status, identification string, and type of service, the status of all 
service nodes offering the service, the values set for service characteristics, and 
service counters. 


1. LATCP> SHOW SERVICE HOMEWK/FULL 


The SHOW SERVICE command in this example produces the following 
display of information about service HOMEWK. This service is offered by the 


local node. 

Service Name: HOMEWK Service Type: General 
Service Status: Available 

Service Ident: 

Node Name Status Rating Identification 

LAV On 31 D 

LATP Reachable 48 

LITITN Reachable 37 

LTDRV Reachable 82 


The display in this example indicates that the locally offered service 
HOMEWK is available and its service type is General, meaning that it is 

a general timesharing service (in contrast to a dedicated application service). 
The display also lists the status of all the nodes that offer the service. The 
local node is LAV. The status of the local node can be either On, Off, or 
Shut. Here node LAV’s status is On. The status of the other nodes indicates 
whether they are reachable. The display lists the ratings of each service 
node, indicating their relative capacity to accept new connections. The D 


SPAWN 


Format 


Parameter 


Description 


LATCP 
SHOW SERVICE 


next to the locally offered service indicates that node LAV computes its rating 
dynamically. An S would indicate that the node’s rating was set permanently 
by the node’s system manager. 


2. LATCP> SHOW SERVICE OFFICE/FULL 


The SHOW SERVICE command in this example produces the following 
display of information about the service OFFICE, which is offered by a remote 
node: 

Service Name: OFFICE 


Service Status: Available 
Service Ident: 


Node Name Status Rating Identification 
BURGIL Reachable 121 
DARWIN Reachable 43 


The display in this example indicates that the service is available. The 
display also indicates the status and other information about the nodes that 
offer the service, BURGIL and DARWIN. 


Creates a subprocess, enabling you to execute DCL commands without 
terminating your LATCP session. The LATCP SPAWN command is similar to 
the DCL SPAWN command. 


To return to your LATCP session, either log out of the subprocess by entering 
the DCL LOGOUT command, or use the DCL ATTACH command to attach your 
terminal to the process running LATCP. 


SPAWN [DCL-command] 


DCL-command 

Specifies a DCL command. If you specify a DCL command, LATCP executes the 
command in a subprocess. Control returns to LATCP when the DCL command 
terminates. 


If you do not specify a DCL command, LATCP creates a subprocess and you can 
then enter DCL commands. You can continue your LATCP session by logging out 
of the spawned subprocess or by attaching to the parent process with the DCL 
ATTACH command. 


The SPAWN command acts exactly like the DCL SPAWN command. You can 
enter DCL commands (such as to create print queues, change the protection of a 
device, answer mail, and so forth) without ending your LATCP session. 


You cannot use this command to gain access to DCL if you are running LATCP 
from a captive account. 
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SPAWN 
Example 
LATCP> SPAWN 
$ 
The SPAWN command in this example creates a subprocess at DCL level. You 
can now enter DCL commands. Log out or enter the DCL ATTACH command to 
return to the LATCP prompt. 
ZERO COUNTERS 
Resets the link, node, and service counters maintained by the local node. You 
must have OPER privilege to use this command. 
Format 
ZERO COUNTERS 
Qualifiers 
/LOG 
/NOLOG 
Specifies whether LATCP displays a message confirming that the counters were 
reset. If you do not specify the /LOG or /NOLOG qualifier, the default is that no 
message will be displayed. 
/LINK[=link-name] 
Specifies the link (on your local node) for which you want counters reset. If you 
do not specify a link name, LATCP zeroes counters for the link LAT$LINK. 
/NODE[=node-name] 
Specifies the node for which you want counters reset. If you do not specify a node 
name, LATCP zeroes the counters for your local node. 
/SERVICE=service-name 
Specifies the service (on your local node) for which you want counters reset. 
Description 
This command resets counters. You can specify whether you want to reset link, 
node, or service counters. You must specify either /LINK, /NODE, or /SERVICE. 
Example 
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LATCP> ZERO COUNTERS/SERVICE=LTVM 
LATCP> SHOW SERVICE LTVM /COUNTERS 


Service Name: LTVM 


Seconds Since Zeroed: 9 
Connections Attempted: 0 Connections Accepted: 0 
Connections Completed: 0 Connections Rejected: 0 


The ZERO COUNTERS command in this example resets the counters kept for 
service LTVM. The display produced by the SHOW SERVICE command shows 
how the ZERO COUNTERS command reset the counters to zero. 
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Log Manager Control Program (LMCP) Utility 


LIMCP Description 
The Log Manager Control Program (LMCP) utility creates and manages the 
transaction logs used by DECdtm services. 
__ Caution 


Some LMCP commands can corrupt data. 


See the OpenVMS System Manager’s Manual to understand the reasons 
for using LMCP and how to use it safely. 
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LMCP Usage Summary 


LMCP lets you create and manage the transaction logs used by Digital’s 
distributed transaction manager, DECdtm services. 

Format 
RUN SYS$SYSTEM:LMCP 


Usage Summary 


To invoke LMCP, enter RUN SYS$SYSTEM:LMCP at the DCL command prompt. 


At the LMCP> prompt, you can enter any of the LMCP commands described in 
the following section. 


To exit from LMCP, enter the EXIT command at the LMCP> prompt, or press 
Ctrl/Z. 
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CONVERT LOG 
LMCP Commands 
Table 12—1 summarizes the LMCP commands. 
Table 12-1 LMCP Commands 
Command Description 
CONVERT LOG Creates a new transaction log and copies records from an 
existing transaction log to the new transaction log 
CREATE LOG Creates a new transaction log 
DUMP Displays the contents of a transaction log 
EXIT Exits LMCP 
HELP Gives help on LMCP commands 
REPAIR Changes the state of transactions 
SHOW LOG Displays information about transaction logs 


CONVERT LOG 


Format 


Creates a new transaction log and copies records from an existing transaction log 
to the new one. 


Use the CONVERT LOG command when you want to move a transaction log or 
change its size. 
Caution 


If a node already has a transaction log, using the CONVERT LOG 
command to create a new one can corrupt data. See the OpenVMS 
System Manager’s Manual for information on how to use the CONVERT 
LOG command. 


The CONVERT LOG command requires: 
e¢ The CMKRNL privilege. 
e READ access to the existing transaction log and the directory it is in. 


¢ READ and WRITE access to the directory in which the new transaction log is 
to be created. 


CONVERT LOG _ old-filespec new-filespec 
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Parameters 


Qualifiers 


Description 


Example 
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old-filespec 
The file specification of the transaction log whose records are to be copied. 


The CONVERT LOG command uses the following defaults: 


¢ Ifyou omit the disk and directory, the CONVERT LOG command looks for the 
transaction log in the directories pointed to by the logical SYS$JOURNAL, 
which must be defined in executive mode in the system logical name table. 


¢ If you omit the file type, the CONVERT LOG command uses .LM$JOURNAL. 


new-filespec 
The file specification of the new transaction log to be created. 


For DECdtm services on a node to use the transaction log, the file must have a 


name of the form SYSTEM$node.LM$JOURNAL, where node is the name of the 
node. 


The CONVERT LOG command uses the following defaults: 


e If you omit the disk and directory, the CONVERT LOG command creates the 
new transaction log in the first accessible directory pointed to by the logical 
SYS$JOURNAL, which must be defined in executive mode in the system 
logical name table. 


¢ If you omit the file type, the CONVERT LOG command uses .LM$JOURNAL. 


/OWNER=uic 
Specifies the owner of the new transaction log. 


Specify the owner using the standard UIC format, as described in the OpenVMS 
User’s Manual. 


/SIZE=size 
Specifies the size of the new transaction log in blocks. 


The minimum size is 100 blocks. If you omit this qualifier, the new transaction 
log is created with the default size of 4000 blocks. 


The CONVERT LOG command creates a new transaction log and copies all active 
transaction records from the specified transaction log into the new one. 


LMCP> CONVERT LOG/SIZE=6000 DISKS$LOG2:[LOGFILES]SYSTEMSRED.LMSOLD - 
_LMCP> DISK$LOG2: [LOGFILES ] SYSTEM$RED . LM$JOURNAL 


This example creates a 6000-block transaction log called 
SYSTEM$RED.LM$JOURNAL in directory DISK$LOG2:[LOGFILES]. It 
then copies all active transaction records from the existing transaction log, 
SYSTEM$RED.LM$OLD in directory DISK$LOG2:[LOGFILES], into the new 
transaction log. 


LMCP 
CREATE LOG 


CREATE LOG 


Format 


Parameter 


Qualifiers 


Creates a new transaction log. 


Caution 


If a node already has a transaction log, using the CREATE LOG command 
to create a new one can corrupt data. 


Requires READ and WRITE access to the directory in which the transaction log 
is to be created. 


CREATE LOG filespec 


filespec 
The file specification of the transaction log to be created. 


For DECdtm services on a node to use the transaction log, it must have a name 
of the form SYSTEM$node.LM$JOURNAL, where node is the name of the node. 


The CREATE LOG command uses the following defaults: 


e If you omit the disk and directory, the CREATE LOG command creates 
the transaction log in the first accessible directory pointed to by the logical 
SYS$JOURNAL, which must be defined in executive mode in the system 
logical name table. 


¢ Ifyou omit the file type, the CREATE LOG command uses .LM$JOURNAL. 


If you specify a disk and directory not pointed to by SYS$JOURNAL, a 
warning message is displayed. However, the transaction log is still created. 
The transaction log will not be used until either: 


¢ SYS$JOURNAL is modified to point to the disk and directory where the log 
was created 
or 


¢ You move the new transaction log to a directory pointed to by 
SYS$JOURNAL. 


/NEW_VERSION 
Forces the CREATE LOG command to create a new version of an existing 
transaction log. 
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Example 


DUMP 


Format 


Parameter 


Qualifiers 
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Caution 


Creating a new version of an existing transaction log can lead to data 
corruption. 


The data in the two transaction logs cannot be merged. Once it has 
started using the new transaction log, DECdtm services cannot access any 
transaction records in the old transaction log. 


/OWNER=uic 
Specifies the owner of the transaction log. 


Specify the owner using the standard UIC format, as described in the OpenVMS 
User’s Manual. 


/SIZE=size 
Specifies the size of the transaction log in blocks. 


The minimum size is 100 blocks. If you omit this qualifier, the transaction log is 
created with the default size of 4000 blocks. 


LMCP> CREATE LOG/SIZE=5000 DISKS$LOG1: [LOGFILES ] SYSTEMSORANGE . LMSJOURNAL 


This example creates a 5000-block transaction log for node ORANGE in 
DISK$LOG1:[LOGFILES]. 


Displays the contents of a transaction log. 


Requires READ access to the transaction log and the directory it is in. — 


DUMP _filespec 


filespec 
The file specification of the transaction log whose contents you want to display. 


The DUMP command uses the following defaults: 


e If you omit the disk and directory, the DUMP command looks for the 
transaction log in the directories pointed to by the logical SYS$JOURNAL, 
which must be defined in executive mode in the system logical name table. 


e If you omit the file type, the DUMP command uses .LM$JOURNAL. 


[ACTIVE 
Selects records only for active transactions. 


LMCP 
DUMP 


/FORMAT(default) 

/NOFORMAT 

Determines whether the contents of the transaction log are displayed as 
formatted records. Specify both the /NOFORMAT and the /HEX qualifiers to 
display the contents of the transaction log in hexadecimal only. 


If the /NOFORMAT qualifier is specified without the /HEX qualifier, only the 
transaction log header is displayed. 


/HEX 

/NOHEX(default) 

Specifies that the contents of the transaction log are displayed as both ASCII 
characters and hexadecimal longwords. Specify both the /NOFORMAT and /HEX 
qualifiers to display the contents of the transaction log in hexadecimal only. 


/LOGID=logid 
Selects records only for transactions that have participants using the specified 
log. 


The logid is in the Log ID field, to the right of the Type field. The value you 
specify must be exactly as it appears in the display, including hyphens. 


Note that you can use this qualifier only with the /RM qualifier. 


/OUTPUT[=filespec] 
Requires READ and WRITE access to the directory in which the output file is to 
be created. 


Specifies where the output from the DUMP command is sent. If you omit this 
qualifier, output is sent to the current SYS$OUTPUT device (usually your 
terminal). To send the output to a file, use the /OUTPUT qualifier. If you do not 
supply a file specification, the output is sent to the file LMCP_DUMP.LIS in your 
default directory. 


/RM=name 
Selects records only for transactions that have participants whose names begin 
with the specified value. 


The participant name is shown in the Name field, and is output in both ASCII 
and hexadecimal. 


If the participant name includes undisplayable characters, you can select records 
for that participant by using the hexadecimal form of its name. When specifying 
the hexadecimal form of the name, you must convert it by reversing the pairs in 
the hexadecimal number. For example, if the participant name is: 


Name (11): "SYSTEMS$RED" (4445 52244D45 54535953) 
the value you specify for the /RM qualifier is: 
/RM=%X53595354454D24524544 


/STATE=COMMITTED 
/STATE=PREPARED 
Selects records only for transactions in either the Committed or Prepared states. 


/TiD=transaction_id 
Selects records only for the specified transaction. 
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The transaction_id is shown in the Transaction ID field. The value you specify 
must be exactly as it appears in the display, including hyphens. 


Use the DUMP command to display the contents of a transaction log. 
Example 12—1 is a sample of a transaction log, with the important fields 
identified. 


Example 12-1 Sample Transaction Log 


Log Manager Control Program V1.0 


Dump of log file DISKS$LOGFILE:SYSTEM$BLUE.LM$JOURNAL; 1 
End of file block 4002 / Allocated 4002 

Log Version 1.0 

Log File UID: 647327A0-2674-11C9-8001-AA00040069F8 @ 
Penultimate Checkpoint: 000000000239 0039 


Last Checkpoint: 00000000042E 002E 

Dump of log file DISKSLOGFILE:SYSTEMSBLUE.LM$JOURNAL; 1 

Present Length: 134 (00000086) Last Length: 0 (00000000) 
VBN Offset: 0 (00000000) Virtual Block: 2 (00000002) @ 
Section: 3 (00000003) 


Record number 1 (00000001),@ 114 (0072) bytes @ 
Transaction state (1): PREPARED @ 
Transaction ID: 1D017140-2676-11C9-9F34-08002B174360 @ (8-JUL-1994 14:08:29.14) 
DECdtm Services Log Format V1.0 @ 
DECdtm Timestamp: 0 000 000000000000 0000000000000000 © 
Type (3): LOCAL RM @ Log ID: 00000000-0000-0000-0000-000000000000 ® 
Name (6): "RMSSUSER1........ It..." ® 
(0000 00284919 00000000 00000031 52455355 24534D52) 
Type (4): PARENT NODE © Log ID: A2ADD200-2641-11C9-8001-AA00040021F8 @ 
Name (11): "SYSTEMSRED" @)(4445 52244D45 54535953) 


In this example, the significant fields are: 

Transaction log header — information about the transaction log’s attributes. 
Section header — the section header of multiple transaction records. 

Record number — the record number, in both decimal and hexadecimal. 


Record size — the record size in both decimal and hexadecimal. 


ooo0d86 


Transaction state — the type of the record. This can be: 


e Prepared 


This type of record is logged when the transaction enters the Prepared 
state. Note that this type of record is not logged at the node on which the 
transaction was started. 


¢ Committed 


This type of record is logged when the transaction enters the Committed 
state. 


¢ Forgotten 


Example 


LMCP 
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This type of record is logged: 


— When the transaction is aborted, if a record of type Prepared was 
logged for the transaction. 


— For a transaction that commits, when no participants require the local 
DECdtm transaction manager to remember that the outcome of the 
transaction is commit. 


Note that DECdtm uses the presumed abort logging protocol. 


e Checkpoint 


Unlike the other types of record, this is not associated with a particular 
transaction. It is logged when the transaction log is checkpointed, 

to compress the space used by active transaction records. It is used 
internally by the DECdtm transaction manager to mark checkpoint 
events. 


Transaction ID — the unique transaction identifier (TID) generated by the 
DECdtm transaction manager. 


DECdtm Services Log Format — the version number of the transaction log 
format. 


DECdtm Timestamp — reserved for future use. 
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Type — the type of the participant in the transaction. This can be: 


¢ Child Node — An immediate child transaction manager. This is a node 
that might query the local DECdtm transaction manager to determine the 
outcome of the transaction. 


e Parent Node — The immediate parent transaction manager. This is the 
node that the local DECdtm transaction manager can query to determine 
the outcome of the transaction. You see this type of participant only for 
transactions in the Prepared state. 


e Local RM — A resource manager on the local node. 


@ Log ID — the identifier of the participant’s log. For a participant of type 
Child Node or Parent Node, this is the identifier of the DECdtm transaction 
log. For a local resource manager, this is the identifier of its private log. 


@® Name — The name of the participant in the transaction, in both ASCII and 
hexadecimal. 


LMCP> DUMP/RM="RMSS$" DISKSLOGFILE: SYSTEMS$BLUE . LM$ JOURNAL 


Dump of log file DISKSLOGFILE:SYSTEM$BLUE.LM$JOURNAL;1 
End of file block 4002 / Allocated 4002 

Log Version 1.0 

Log File UID: 6A034B20-6FCC-0095-D7E4-EAA500000000 
Penultimate Checkpoint: 00000000382E 002E 

Last Checkpoint: 000000003C2E 002E 


Dump of log file DISKSLOGFILE:SYSTEMSBLUE.LM$JOURNAL; 1 


Present Length: 46 (0000002E) Last Length: 512 (00000200) 
VBN Offset: 30 (0000001E) Virtual Block: 32 (00000020) 
Section: 1 (00000001) 
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Record number 2 (00000002), 5 (0005) bytes 
Transaction state (3): CHECKPOINT 
Checkpoint record contains no active transactions. 


Record number 1 (00000001), 21 (0015) bytes 
Transaction state (0): FORGOTTEN 
Transaction ID: 271D9FC0-7082-0095-98E7-EAA500000000 


Dump of log file DISKSLOGFILE:SYSTEM$BLUE.LM$JOURNAL; 1 


Present Length: 113 (00000071) Last Length: 512 (00000200) 
VBN Offset: 29 (0000001D) Virtual Block: 31 (0000001F) 
Section: 2 (00000002) 


Record number 1 (00000001), 93 (005D) bytes 
Transaction state (2): COMMITTED 
Transaction ID: 271D9FC0-7082-0095-98E7-EAA500000000 ( 3-MAR-1994 13:53:03.42) 
DECdtm Services Log Format v1.0 
Type (2): CHILD NODE Log ID: EF006060-CF37-11C9-8001-AA000400DEFA 
Name (10): "SYSTEMSORANGE" (45 47484152 4F244D45 54535953) 
Type (3): LOCAL RM Log ID: 28C5D180-7082-0095-0000-000000000000 
Name (22): "RMSSUSER1....... Fe wales at 
(0000 00178B60 00000000 00000031 52455355 24534D52) 


Total of 1 transactions active, 0 prepared and 1 committed. 


This example displays the contents of the transaction log for node BLUE, 
selecting only transactions in which RMS Journaling for OpenVMS is 
participating. 


Gives help on LMCP commands. 


HELP  [help-topic [help-subtopic]] 


help-topic 
Specifies the command that you want help for. 


help-subtopic 
Specifies the parameter or qualifier that you want help for. 


REPAIR 


Format 


Parameter 


Qualifiers 


LMCP 
REPAIR 


Changes the state of transactions. 


Caution 


The REPAIR command can corrupt data. Use it only if none of the 
resource managers participating in the transaction provides a means of 
changing transaction states. 


The REPAIR command requires: 
¢ The CMKRNL privilege. 
¢ READ and WRITE access to the transaction log and the directory it is in. 


REPAIR __filespec 


filespec 
The file specification of the transaction log containing the transactions whose 
states you want to change. 


The REPAIR command requires the following: 


¢ The logical SYS$JOURNAL must be defined in executive mode in the system 
logical name table. 


e The transaction log must be in a directory pointed to by the logical 
SYS$JOURNAL. 


e The file type of the transaction log must be .LM$JOURNAL. 
The REPAIR command uses the following defaults: 


e If you omit the disk and directory, the REPAIR command looks for the 
transaction log in the directories pointed to by the logical SYS$JOURNAL. 


e If you omit the file type, the REPAIR command uses .LM$JOURNAL. 


/LOGID=logid 
Selects records only for transactions that have participants using the specified 
log. ; 


The logid is in the Log ID field, to the right of the Type field in the output from 
the DUMP command. The value you specify must be exactly as it appears in the 
display, including hyphens. 


Note that you can use this qualifier only with the /RM qualifier. 


/RM=name 
Selects records only for transactions that have participants whose names begin 
with the specified value. 
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The participant name is shown in the Name field in the output from DUMP, and 
is output in both ASCII and hexadecimal. 


If the participant name includes undisplayable characters, you can select records 
for that participant by using the hexadecimal form of its name. When specifying 
the hexadecimal form of the name, you must convert it by reversing the pairs in 
the hexadecimal number. For example, if the participant name is: 


Name (11): "SYSTEMSRED" (4445 52244D45 54535953) 
the value you specify for the /RM qualifier is: 
/RM=%X53595354454D24524544 


/STATE=COMMITTED 
/STATE=PREPARED 
Selects records only for transactions in either the Committed or Prepared states. 


/TiD=transaction_id 
Selects records only for the specified transaction. 


The transaction_id is shown in the Transaction ID field in the output from the 
DUMP command. The value you specify must be exactly as it appears in the 
display, including hyphens. 


Use the REPAIR command to change the state of transactions. 


Caution 


The REPAIR command can corrupt data. Use it only if none of the 
resource managers participating in the transaction provides a means of 
changing transaction states. 


Use this command only if none of the resource managers participating in the 
transaction provides a means of changing the transaction state. For example, if 
Rdb for OpenVMS is a participant in the transaction, do not use REPAIR; use the 
Rdb for OpenVMS Management Utility (RMU) commands instead. Similarly, if 
DBMS for OpenVMS is a participant, use the Database Operator utility (DBO) 
commands. 


Change the transaction state only when you already know the outcome of the 
transaction and need to manually update the transaction log immediately. You 
might want to do this because, for example, you have lost the network link to a 
remote node. 


When you use the REPAIR command you use qualifiers to specify which 
transactions you want to change. By default, the REPAIR command selects 
all transactions. 


Once you have selected the transactions to change, you enter the REPAIR 
subcommand mode. Within this mode, the prompt changes to REPAIR> and you 
have a set of additional subcommands, described in Table 12-2. You use these 
commands either to manually change the state of the transaction, or to select the 
next transaction that matches your selection criteria. 


Example 


LMCP 


REPAIR 
Table 12-2 Subcommands of the REPAIR Command 
Subcommand Action 
ABORT Specifies that a Prepared transaction is to be aborted by 


removing its record from the transaction log. This writes a 
record of type Forgotten for the transaction. 
Note that DECdtm services use the presumed abort logging 


protocol. 
COMMIT Specifies that a Prepared transaction is to be committed. 
This writes a record of type Committed for the transaction. 
EXIT Returns to the LMCP> prompt. 
FORGET Specifies that a Committed transaction can be removed from 


the transaction log. This writes a record of type Forgotten 
for the transaction. 


NEXT Displays the next transaction that matches your selection 
criteria. 


LMCP displays each of the selected transactions in turn, so that you can change 
them. For each selected transaction, you can either use the ABORT, COMMIT, 
and FORGET subcommands to change the state of the transaction, or use the 
NEXT subcommand to select the next transaction. 


To exit from the REPAIR subcommand mode, enter the EXIT subcommand or 
press Ctrl/Z. 


LMCP> REPAIR/STATE=PREPARED/RM="RMS$" DISKSJOURNALS: [LOGFILES ] SYSTEMSORANGE 


Dump of log file DISKS$JOURNALS: [LOGFILES ] SYSTEMSORANGE .LM$JOURNAL; 1 

End of file block 5001 / Allocated 5001 

Log Version 1.0 

Log File UID: 61F37F80-9AD0-0094-F0B6-00000000A656 ( 5-JUN-1994 15:13:54.04) 
Penultimate Checkpoint: 0000010CB514 0314 

Last Checkpoint: OOO0010DFA08 0408 


Transaction state (2): PREPARED 
Transaction ID: F2ED7F80-1547-0095-A42A-00000000A656 ( 5-JUN-1994 5:07:09.24) 
DECdtm Services Log Format V1.0 
Type (3): LOCAL RM Log ID: A656B6F0-0000-0000-0000-000000000000 
Name (6): "RMSSUSER1........ It..." 
(0000 002B4919 00000000 00000031 52455355 24534D52) 
Type (3): PARENT NODE Log ID: A656B6F0-0000-0000-0000-000000000000 
Name (6): "SYSTEMSBLUE" (45554C 42244D45 54535953) 


REPAIR> COMMIT 
REPAIR> NEXT 


In this example, transactions to be modified are selected from the transaction log 
for node ORANGE. The transactions selected are those that match both of the 
following criteria: 


e RMS Journaling for OpenVMS is participating in the transaction. 
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e The transaction is in the Prepared state. 


The first transaction is committed by manually changing its state from Prepared 
to Committed, then the NEXT subcommand is used to advance to the next 
selected transaction. 


Displays information about transaction logs. 


Requires READ access to the transaction logs and the directories they are in. 


SHOW LOG [filespec] 


filespec 
The file specification of the transaction logs you want to display information 
about. This can include the percent (%) and asterisk (*) wildcard characters. 


The SHOW LOG command uses the following defaults: 


e¢ If you omit the disk and directory, the SHOW LOG command looks for the 
transaction log in the directories pointed to by SYS$JOURNAL, which must 
be defined in executive mode in the system logical name table. 


¢ Ifyou omit the file type, the SHOW LOG command uses .LM$JOURNAL. 


/CURRENT 

Displays information about the local node’s transaction log. This includes the 
number of checkpoints and stalls that have occurred since DECdtm services 
started on this node. 


To use the /CURRENT qualifier: 
e You must have the CMKRNL privilege. 
e You must omit the parameter to the SHOW LOG command. 


/FULL : 
Lists all attributes of the transaction logs. For each transaction log, both the full 
file specification of the transaction log and its size are displayed. 


If you do not specify which transaction log you want to display, the SHOW LOG 
command lists all transaction logs of the form SYSTEM$*.LM$JOURNAL, in all 
directories pointed to by the logical SYS$JOURNAL, which must be defined in 
executive mode in the system logical name table. 


/OUTPUT[=filespec] 
Requires READ and WRITE access to the directory in which the output file is to 
be created. 


Example 


LMCP 
SHOW LOG 


Specifies where the output of the SHOW LOG command is sent. If you omit 
this qualifier, output is sent to the current SYS$OUTPUT device (usually your 
terminal). To send the output to a file, use the /OUTPUT qualifier. If you do not 
supply a file specification, the output is sent to the file LMCP_SHOW.LIS in your 
default directory. 


LMCP> SHOW LOG/FULL 
Directory of DISKS$JOURNALS: [LOGFILES ] 


DISKSJOURNALS : [LOGFILES ] SYSTEM$BLUE. LMSJOURNAL; 1 
End of file block 4002 / Allocated 4002 

Log Version 1.0 

Log File UID:  647327A0-2674-11C9-8001-AA00040069F8 
Penultimate Checkpoint: 000000001A39 0039 

Last Checkpoint: 000000001C8A 008A 


Total of 1 file. 
Directory of DISKS$RED: [LOGFILES ] 


DISKS$RED: [LOGFILES ] SYSTEMSRED.LMSJOURNAL; 1 

End of file block 4002 / Allocated 4002 

Log Version 1.0 

Log File UID: 17BB9140-2674-11C9-8001-AA0004006AF8 
Penultimate Checkpoint: QQQQQ0ECADE5 4155 

Last Checkpoint: OO0000F105FC 41FC 


Total of 1 file. 
Directory of DISK$LOGFILES: [LOGS] 


DISKSLOGFILES : [LOGS ] SYSTEMS YELLOW. LM$JOURNAL; 1 

End of file block 1002 / Allocated 1002 

Log Version 1.0 

Log File UID: 590DAA40-2640-11C9-B77A-08002B14179F 
Penultimate Checkpoint: 00000C8B4819 2019 

Last Checkpoint: 00000C8BC15B 335B 


Total of 1 file. 


Total of 3 files in 3 directories. 
This example displays full details about the transaction logs in all directories 


pointed to by the logical SYS$JOURNAL. This logical is defined in executive 
mode in the system logical name table. 
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ACL Editor Keypad Editing Commands 


By default, the access control list editor (ACL editor) prompts you for each access 
control entry (ACE) and provides values for some of the fields within an ACE. 
You can navigate the ACE fields by using keypad commands, such as FIELD and 
ITEM. 


This appendix describes all the keypad editing commands supplied by the 
ACL editor. You can supplement or change these key definitions by modifying 
and recompiling the ACL editor section file SYS$LIBRARY:ACLEDIT.TPU 
(see Appendix B for more information). To get help on the ACL editor keypad 
commands, press PF2. 


A.1 ACL Editor Keypad Commands 


Figure A—1 shows the default ACL editor keypad commands for LK201 keyboards. 
The numeric keypad on VT100-series terminals is identical to that of the LK201 
keyboard shown in Figure A-1; VT100 terminals, however, do not have the 
supplemental editing keypad (keys E1 through E6 ). 


ACL Editor Keypad Editing Commands 
A.1 ACL Editor Keypad Commands 


Figure A-1 Keypad for an LK201-Series Keyboard 


VT200 


EI E2 E3 PF1 PF2 PF3 PF4 

REMOVE HELP FNDNXT DEL ACE 
FIND INSERT GOLD | 
COPY HELP FMT FIND UND ACE 
E4 E5 EG ; 7 8 _ 
PREV NEXT FIELD MOVE DELW 
SELECT 
SCREEN SCREEN ADVFIELD SCREEN UND W 
4 











4 5 ; 

UP ADVANCE BACKUP DELC 

BOTTOM TOP UND C 

< t > 1 2 3 
LEFT DOWN RIGHT WORD a 
DEL EOL 7% 
ENTER 
OVER ACE ITEM 
INSERT 

ZK-1758-GE 


Table A-1 describes each of the keypad commands you can use with the ACL 
editor. In this table, KPn refers to a keypad key labeled with the number n. For 
example, KP4 refers to the keypad key labeled with the number 4. 


Table A-1 ACL Editor Keypad Commands 


Key or 

Command Key Sequence Description 

ADVANCE KP4 Sets the current direction forward for the FIND, FNDNXT, 
MOVE SCREEN, OVER ACE, and WORD commands. 
Movement is toward the end of the ACL. 

ADV FIELD GOLD-KP7 Completes the current ACE field and moves the cursor to 
the next ACE field. 

BACKUP KP5 Reverses the current direction for the FIND, FNDNXT, 
MOVE SCREEN, OVER ACE, and WORD keys. Movement 
is toward the beginning of the ACL. 

BOTTOM GOLD-KP4 Positions the cursor after the last line of the last ACE. Any 
entries you add are placed at the end of the ACL. 

DEL ACE PF4 Deletes the entire ACE in which the cursor is positioned 
and stores it in the delete-ACE buffer. 

DEL C Comma Deletes the character on which the cursor is positioned and 
stores it in the delete-character buffer. 

DEL EOL GOLD-KP2 Deletes text from the current cursor position to the end of 


the line and stores it in the delete-line buffer. 


(continued on next page) 
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Table A-1 (Cont.) ACL Editor Keypad Commands 


Command 


DEL W 


ENTER 


EOL 
FIELD 


FIND 


FNDNXT 


GOLD 


HELP 


HELP FMT 
INSERT 


ITEM 


MOVE SCREEN 


OVER ACE 


TOP 


UND ACE 


UND C 


UND W 


WORD 


Key or 
Key Sequence 


Minus 


Enter 


GOLD-PF3 


PF3 
PF1 
PF2 


GOLD-PF2 
GOLD-KP0O 


Period 


KP8 


GOLD-KP5 
GOLD-PF4 
GOLD-Comma 
GOLD-Hyphen 


KP1 


Description 


Deletes the text from the current cursor position to the 
beginning of the next word and stores it in the delete-word 
buffer. 


Indicates that the current ACE is complete. The ACL 
editor terminates the insertion and verifies that the syntax 
of the ACE is complete. You can press the Enter key 
while the cursor is located at any position within the ACE. 
(Pressing the Return key produces the same results.) 


Moves the cursor to the end of the current line. 


Completes the current ACE field and moves the cursor to 
the next ACE field or subfield, inserting text as needed. 
If the ACL editor is not in prompt mode, the ACL editor 
advances to the next field in the current ACE. 


Searches for an occurrence of a string. Press the FIND key 
and then enter the string from the main keyboard. Press 
the ENTER key to search for the string in the current 
direction, or the ADVANCE or BACKUP key to change the 
search direction. 


Searches in the current direction for the next occurrence of 


the string previously entered with the FIND key. 


When pressed before another keypad key, specifies the 
second key’s alternate function (the bottom function on the 
keypad diagram). 


Displays information about using the editing keypad. 
Displays information about ACE formats. 


Moves all text from the current line down one line, leaving 
a blank line where an ACE is to be inserted. 


Selects the next item for the current ACE field. If the ACL 
editor is not in prompt mode, this key is ignored. 


Moves the cursor one screen in the current direction (see 
ADVANCE or BACKUP). A screen is defined as two-thirds 
the number of lines in the display. 


Moves the cursor to the beginning of the next ACE (if the 
direction is set to ADVANCE) or to the beginning of the 
previous ACE (if the direction is set to BACKUP). 


Moves the cursor position to the first character of the first 
ACE in the access control list. 


Inserts the contents of the delete-ACE buffer in front of 
the ACE in which the cursor is currently positioned. 


Inserts the contents of the delete-character buffer directly 
in front of the cursor. 


Inserts the contents of the delete-word buffer directly in 
front of the cursor. | 


Moves the cursor one word forward (if the direction is 
set to ADVANCE) or backward (if the direction is set to 
BACKUP). 
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A.2 Additional ACL Editing Keys and Key Sequences 


In addition to keypad editing, the ACL editor lets you use other keyboard keys 
and key sequences to perform editing functions. Table A—2 describes these 
additional ACL editing keys and key sequences. Keys in parentheses indicate the 
equivalent key for an LK201-series keyboard. 


Table A-2 Additional ACL Editing Keys and Key Sequences 


Key or Sequence 


{ 


GOLD-<— 
GOLD-— 
Backspace (F12) 
CtrV/A 


Ctrl//D 
Ctrl/H 
Ctrl/J 


Ctrl/R 


GOLD-Ctrl/R 


Ctrl/U 
GOLD-Ctr1/U 


Ctrl/W 
GOLD-Ctrl/W 
CtrV/Z 


GOLD-Ctrl/Z 


Delete (<X]) 
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Action Taken When Key or Sequence is Pressed 


Moves the cursor to the character directly in line below it. If the ACE in which the 
cursor is positioned is new, the ACL editor processes the ACE before moving the 
cursor. If the entry is incomplete or formatted incorrectly, an error occurs and the 
cursor does not move. 


Moves the cursor one character to the left. If the cursor is at the left margin, moves 
it to the rightmost character in the line above. 


Moves the cursor one character to the right. If the cursor is at the right margin, 
moves it to the leftmost character in the line below. 


Moves the cursor to the character directly in line above it. If the ACE in which the 
cursor is positioned is new, the ACL editor processes the ACE before moving the 
cursor. If the entry is incomplete or formatted incorrectly, an error occurs and the 
cursor does not move. 


Shifts the text in the display window 8 characters to the left. 
Shifts the text in the display window 8 characters to the right. 
Moves the cursor to the beginning of the current line. 


Changes the current mode from insert mode to overstrike mode or from overstrike 
mode to insert mode. Insert mode (the default) inserts a character to the left of the 
current character. Overstrike mode replaces the current character. 


Allows you to execute one TPU command. 


Moves the cursor to the beginning of the line. (Performs the same function as the 
backspace key.) 


Deletes the text from the cursor back to the beginning of the word. (Performs the 
same function as the linefeed key.) 


Refreshes the screen display. Clears and redraws the screen, deleting any extraneous 
characters or messages that might have appeared on the screen but are not part of 
the ACL you are editing. (Performs the same function as Ctr]l/W.) 


Returns the ACL to its original state before the ACL editor was invoked. (Performs 
the same function as GOLD-CtrI/W.) 


Deletes the text from the cursor to the beginning of the line. 


Inserts the contents of the deleted-line buffer into the line at the current position. 
The line might wrap automatically. 


See Ctrl/R. 
See GOLD Ctrl/R. 


Ends the editing session and updates the ACL. (Unless otherwise specified, any 
recovery and journal files are deleted.) 


Ends (quits) the editing session without saving any of the changes made to the ACL. . 
(Unless otherwise specified, any recovery and journal files are deleted.) 


Deletes the character to the left of the cursor. 


(continued on next page) 
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Table A-2 (Cont.) Additional ACL Editing Keys and Key Sequences 


Key or Sequence Action Taken When Key or Sequence is Pressed 


Linefeed (F138 ) 


Tab 


Deletes the text from the cursor back to the beginning of the word. If the cursor is 
positioned at the first character of the word, deletes to the beginning of the previous 
word. 


Moves the text located to the right of the cursor to the next tab stop. 


A.3 ACL Editing Keys on the Supplemental Keypad (LK201-Series 
Keyboards) 


You can use the supplemental keypad on an LK201-series keyboard to move 
sections of text from one part of an ACL to another. However, note that certain 
supplemental editing keys (Insert Here, Remove, and Select) require a PASTE 
buffer, which is not enabled by default. To enable the PASTE buffer for the 
current editing session, do the following: 


1. Press Ctrl/D 

2. At the TPU command: prompt, enter the following statement: 
TPU command: ACLEDIT$X_PASTE BUFFER:=1 

3. Press Ctrl/D again, and enter the following statement: 
TPU command: ACLEDITSX CHECK MODIFY:=0 


Setting the value of the ACLEDIT$X_CHECK_MODIFY variable to 0 
prevents the ACL editor from checking for a modifiable ACE. The two 
features (support for the PASTE buffer and the check for a modifiable ACE) 
are not compatible. 


To enable the PASTE buffer for all ACL editing sessions, change the values of the 
variables ACLEDIT$X_PASTE_BUFFER and ACLEDIT$X_CHECK_MODIFY in 
the ACL editor section file and recompile the file (see Appendix B). 


Table A-8 describes the supplemental keypad keys you can use with the ACL 
editor. 


Table A-3 ACL Editing Keys on the Supplemental Keypad 


Key or 

Key Sequence Description 

Find Elicits the Search for: prompt as the first step in the FIND 
operation. Type the search string after the prompt; then, press 
either the Do key or the Enter key to process the search. Performs 
the same function as the FIND keypad command. 

Insert Here Indicates where an ACE is to be inserted or, if support for the 
PASTE buffer is enabled, indicates the line where the selected text 
in the PASTE buffer is to be inserted. 

Remove Removes the selected text to the PASTE buffer. Each time you press 
the Remove key, the ACL editor deletes the previous contents of the 
PASTE buffer. 


(continued on next page) 
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Table A-3 (Cont.) ACL Editing Keys on the Supplemental Keypad 


Key or 
Key Sequence 


GOLD-Remove 
(COPY) 


Select 


Prev Screen 


Next Screen 


Description 


Copies the selected text to the PASTE buffer. Each time you use the 
COPY command, the ACL editor deletes the previous contents of 
the PASTE buffer. 


Marks the beginning of a range of text to be removed or copied to 
the PASTE buffer. Press the Select key. Then, move the cursor to 
include the desired amount of text to be removed or copied. Press 
either Remove or GOLD-Remove (COPY) to complete the operation. 


Moves the cursor to the previous screen. By default, a screen is 
defined as two-thirds the number of lines in the display. 


Moves the cursor one screen forward. By default, a screen is defined 
as two-thirds the number of lines in the display. 


B 


Customizing the ACL Editor 


You can modify the access control list editor (ACL editor) by modifying 
and recompiling the ACL section file SYS$LIBRARY:ACLEDIT.TPU 

(the source file used to create the compiled ACL section file 
SYS$LIBRARY:ACLEDT$SECTION.TPU$SECTION). You can also create 
your own ACL section file. , 


See the DEC Text Processing Utility Reference Manual for more information on 
writing and processing section files. 


B.1 Modifying Variables in the ACL Section File 
Table B—1 lists the ACL section file variables and their defaults. 


Table B—1 ACL Section File Variables 


Variable Meaning 

ACLEDIT$X_CHECK_DUPLICATES Controls whether a check for duplicate ACEs 
is made. This variable can take the following 
values: 


0 No duplicate ACE check is made. 


1 A duplicate ACE check is made. If the 
ACE to be entered matches an existing 
ACE, an error message is returned. 
This is the default. 


ACLEDIT$X_CHECK_MODIFY Allows or disallows modification of ACEs. 
This variable can take the following values: 


0 The ACE can be modified. 


1 The ACE cannot be modified. If an 
attempt is made to modify the ACE, it 
is replaced with the original ACE. This 
is the default. 


ACLEDIT$X_DIRECTORY_FILE Indicates whether the object is a directory 
file. This variable can take the following 
values: 


0 The object is nota directory file. 
1 The object is a directory file. 


(continued on next page) 
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Table B-1 (Cont.) ACL Section File Variables 


Variable Meaning 


ACLEDIT$X_PASTE_BUFFER Controls whether PASTE buffer support is 
enabled for VT200 series terminals. This 
variable can take the following values: 


0 PASTE buffer support is disabled. This 
is the default. 


1 PASTE buffer support is enabled. 


ACLEDIT$X_PROMPT Controls whether automatic text insertion 
(prompt mode) is enabled. This variable can 
take the following values: 


0 Prompt mode is disabled. 


1 Prompt mode is enabled. This is the 
default. 


ACLEDIT$X_USE_DEFAULT_OPT Controls whether the DEFAULT option 
can be used with nondirectory ACEs. This 
variable can take the following values: 


0 The DEFAULT option can only be used 
with ACEs of directory (.DIR) files. This 
is the default. 


1 The DEFAULT option is available for 
use with ACEs of all object types. 


ACLEDIT$C_WINDOW_SHIFT Specifies the number of columns to shift the 
edit window in the direction wanted, GOLD 
key and left arrow for a left shift and GOLD 
key and right arrow for a right shift. The 
default is 8 columns. 


If you modify any of the variables in Table B—1 or change any other part of the 
ACL section file, recompile the section file with the following command: 


$ EDIT/TPU/NOSECTION/COMMAND=SYSSLIBRARY : ACLEDIT 


Use the preceding command if you make changes directly to the source code 

file (SYS$LIBRARY:ACLEDIT) that creates the compiled ACL section file 
SYS$LIBRARY:ACLEDT$SECTION. If you add a private command file to the 
existing ACL section file, recompile the section file using the following command: 


$ EDIT/TPU/SECTION=SYS$LIBRARY : ACLEDT$SECTION/COMMAND=CUSTOM ACL.TPU 


The compiled DECtpu ACL section file is placed in your current directory. To use 
the new section file, do one of the following: 


¢ Move the compiled section file, ACLEDT$SECTION.TPU$SECTION, to the 
SYS$LIBRARY directory. This changes the default ACL editor section file for 
all users. 


¢ Keep the compiled section file in your directory and define the logical name 
ACLEDT$SECTION in your LOGIN.COM file to point to the file, as follows: 


$ DEFINE ACLEDTSSECTION yourdisk: [yourdir ]ACLEDT$SECTION 


Note that the default file type for the section file before compiling (the source file) 
is TPU, and the default file type for the compiled section file is TPU$SECTION. 


For more information on writing and processing a DECtpu section file, see the 
DEC Text Processing Utility Reference Manual. 
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B.2 Using the ACL Editor CALL_USER Routine 


The ACL editor CALL_USER routine is part of the shareable image 
SYS$LIBRARY:ACLEDTSHR.EXE. You can incorporate the ACL editor CALL_ 
USER routine with its existing function codes into your own ACL section file, or 
you can write your own CALL_USER routine that recognizes a different set of 
function codes. 


The ACL editor CALL_USER routine recognizes only those functions used by 
the ACL editor DECtpu section file. All other function codes are passed to a 
user-supplied CALL_USER routine; if the high-order word of the CALL_USER 
function code contains the ACL editor facility code (277 in decimal or 115 in 
hexadecimal), it is handled by the ACL editor CALL_USER routine. Otherwise, 
an attempt is made to locate a user-supplied CALL_USER routine. Refer to 
the description of the CALL_USER routine in the DEC Text Processing Utility 
Reference Manual for more information on creating your own CALL_USER 
routine. 


Table B—2 describes the CALL_USER routine function codes supported by the 
ACL editor. 


Table B—2 CALL_USER Function Codes 


Function 
Code 


18153473 


18153474 


18153475 


18153476 


18153477 


Mnemonic Description 


ACLEDIT$C_PARSE_ACE Parses the input string (ACE) and returns the 
parsed (binary) ACE if no errors are found. 
Otherwise, the returned string contains a zero 
as the first two characters, and the unparsed 
portion of the input ACE as the remainder of the 
string. 
ACLEDIT$C_CHECK_MODIFY Returns the string “READ_WRITE” if the ACE can 


be modified by the user. Otherwise, returns the 
string “READ_ONLY.” 


ACLEDIT$C_PROMPT_MODE Returns the string “PROMPT_MODE” if the 
prompt mode option was specified. Otherwise, 
returns the string “NOPROMPT_MODE.” 


ACLEDIT$C_CHECK_ACE Parses the input string (ACE) and returns the 
parsed (binary) ACE if no errors are found. 
Otherwise, the ACE text is highlighted in 
reverse video and a DECtpu variable of the form 
ACLEDIT$X_RANGE_x is created to identify the 
ACE in error. (The “x” is a sequential number 
starting with 1.) 


ACLEDIT$C_CHECK_DIR Returns the string “DIRECTORY_FILE” if the 
object being edited is a directory file. Otherwise, 
returns the string “NODIRECTORY_FILE.” 


(continued on next page) 
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Table B-2 (Cont.) CALL_USER Function Codes 


Function 
Code 


18153478 


18153479 


18153482 


B-4 


Mnemonic 


ACLEDIT$C_SET_CANDIDATE 


ACLEDIT$C_CHECK_DUP 


ACLEDIT$C_MESSAGE 


Description 


Parses the input string (ACE) and returns the 
string “PARSE_OK” if no error was encountered. 
Otherwise, returns the string “PARSE_ERROR.” 
If the parse was successful, a check is made for 
duplicate ACEs using the CALL_USER function 
ACLEDIT$C_CHECK_DUP. 


Parses the input string (ACE) and returns 

the string “PARSE_ERROR’” if an error was 
encountered. Otherwise, the parsed (binary) 
ACE is compared with the candidate ACE set 
by the CALL_USER function ACLEDIT$C_SET_ 
CANDIDATE. Returns the string “DUPLICATE_ 
ACE” if the ACE is a duplicate, or “UNIQUE_ 
ACE” if it is not a duplicate. 


Assumes the input string is a system error code 
and returns in the ACL editor message window 
the message text associated with the error code. 
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Table C—1 gives a summary of the system services that relate to accounting. 
There is no system service that reads accounting files; to do this you must use 
knowledge of the structure of accounting files. 


Table C-1 Summary of Accounting System Services 


System Service Description 
$CREPRC Creates a process in which accounting can be disabled. 
$SNDJBC Controls what resources are logged in the current accounting file, or 


logs a user defined record in the current accounting file. 


This appendix describes the structure of an accounting file. It is for programmers 
who want to access accounting data directly. 


Note 


The formats described here are subject to change without notice in a 
future release. 


The symbols and offsets described in this appendix are defined by the $ACRDEF 
macro in the STARLET library. 


C.1 Format of an Accounting File Record 


An accounting record consists of an accounting record header and a number of 
information packets. The number and type of information packets depend on the 
type of the record. 


Figure C—1 illustrates the general format of an accounting record. Table C-—2 
describes the fields in the record header. The type field in the record header is 
subdivided into five fields, described in Table C-3. 
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Figure C-1 Format of an Accounting Record 
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Table C-2 Fields in an Accounting Record Header 


Symbolic Offset 
ACR$W_TYPE 


ACR$W_LENGTH 
ACR$Q_SYSTIME 


Description 


Identifies the type of the record. This field is subdivided into 
five fields, described in Table C—3. (word) 


Total length of the record, in bytes. (word) 
System time (64-bit absolute time). (quadword) 


Table C-3 ACRS$W_TYPE Fields in an Accounting Record Header 


Symbolic Offset 
ACR$V_PACKET 


ACR$V_TYPE 


ACR$V_SUBTYPE 


Description 
Identifies this header as a record header. This bit must be 0. 
(1 bit) 


Identifies the type of the record. There are currently eight 
record types, described in Table C—4. (7 bits) 


Identifies the type of process with which the record is 
associated. The subtypes (4 bits) are: 


Symbol Meaning 
ACR$K_BATCH Batch process 
ACR$K_DETACHED Detached process 
ACR$K_INTERACTIVE _ Interactive process 
ACR$K_NETWORK Network process 


ACR$K_SUBPROCESS Subprocess 


(continued on next page) 
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Table C-3 (Cont.) ACRS$W_TYPE Fields in an Accounting Record Header 


Symbolic Offset 


ACR$V_VERSION 


ACR$V_CUSTOMER 


Description 


Note that this field is only meaningful for records of type 
ACR$K_IMGDEL and ACR$K_PRCDEL. 


Identifies the version of the accounting file record structure. 


The versions (3 bits) are: 


Symbol 
ACR$K_VERSION2 
ACR$K_VERSION38T 
ACR$K_VERSIONS 


Meaning 


VAX/VMS Version 2.0 
VAX/VMS Version 3.0 field test 


OpenVMS Alpha Version 1.0 and 
VAX/VMS Version 3.0 


Identifies whether the record was written by Digital software 
or by customer software. If this bit is 0, the record was written 
by Digital software. If this bit is 1, the record was written by 


customer software. (1 bit) 


C.1.1 Types of Accounting Record 


The type of an accounting record identifies the type of event that caused the 
record to be logged. There are currently eight types of accounting record, shown 
in Table C—4. This table shows the information packets contained in each type of 


record. 


Table C-4 Types of Accounting Record 


Symbol 
ACR$K_FILE_BL 


ACR$K_FILE_FL 
ACR$K_IMGDEL 
ACR$K_LOGFAIL 
ACR$K_PRCDEL 
ACR$K_PRINT 

ACR$K_SYSINIT 


ACR$K_USER 


Event 


The accounting file was opened 


The accounting file was closed 


An image terminated 


A login attempt failed 
A process terminated 
A print job finished 


The system was initialized 


Information Packets 


ACR$K_FILENAME 
ACR$K_FILENAME 


ACR$K_ID 
ACR$K_RESOURCE 
ACR$K_IMAGENAME 


ACR$K_ID 
ACR$K_RESOURCE 
ACR$K_ID 
ACR$K_RESOURCE 


ACR$K_ID 
ACR$K_PRINT 


ACR$K_ID 
ACR$K_RESOURCE 


An accounting message was sent by the ACR$K_ID 


$SNDJBC system service 


C.1.2 Format of an Information Packet 


There are six types of information packets. The header in each information 
packet defines the type of packet as follows: 


e File name packet (ACR$K_FILENAME) 
° Identification packet (ACR$K_ID) 


ACR$K_USER_DATA 
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e Image name packet (ACR$K_IMAGENAME) 
e Print resource packet (ACR$K_PRINT) 

¢ Resource packet (ACR$K_RESOURCE) 

e User data packet (ACR$K_USER_DATA) 


Section C.1.2.1 describes the general format of an information packet. 
Section C.1.2.2 to Section C.1.2.7 describe the format of each type of information 
packet. 


C.1.2.1 General Format 


Each information packet contains a packet header, followed by data fields. The 
data fields can contain fixed-length data, variable-length data, or offsets to 
variable-length data. Offsets contain the distance in bytes from the beginning of 
the packet to the variable-length data. 


All variable-length data are represented as counted strings. Variable-length data 
follow the last fixed-length data field in the packet. Figure C—2 shows the general 
format of an information packet. An information packet may not have values in 
all of its data fields. 


See Section C.1.2.2 to Section C.1.2.7 for complete descriptions of the data fields 
contained in each information packet. 


All information packets start with a packet header that has ACR$W_LENGTH 
and ACR$W_TYPE fields (see Table C-—5). 


Figure C-2 Format of an Information Packet 
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Table C-5 Fields in an Information Packet Header 


Symbolic Offset Description 
ACR$W_TYPE Identifies the type of the packet. This field is subdivided into 
five fields, described in Table C-6. (word) 


ACR$W_LENGTH Total length of the packet, in bytes. (word) 


Table C-6 ACR$W_TYPE Fields in an Information Packet Header 


Symbolic Offset Description 
ACR$V_PACKET ae this header as a packet header. This bit must be 1. 
i 

ACR$V_TYPE Identifies the type of the packet. There are currently six 
packet types. The packet types (7 bits) are: 
Symbol Description 
ACR$K_FILENAME File name packet 
ACR$K_ID Identification packet 
ACR$K_IMAGENAME Image name packet 
ACR$K_PRINT Print resource packet 
ACR$K_RESOURCE Resource packet 


ACR$K_USER_DATA User data packet 


ACR$V_SUBTYPE Identifies the packet subtype; reserved for future use. (4 bits) 
ACR$V_VERSION See Table C-3 
ACR$V_CUSTOMER See Table C-3 


C.1.2.2 File Name Packet (ACR$K_FILENAME) 


The file name packet contains the name of the accounting file. Figure C—3 shows 
the format of the file name packet. Table C—7 describes the field contained in the 
packet. See Section C.1.2.1 for information on the packet header. 


Figure C-3 Format of a File Name Packet 
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Table C-7 Data Fields in a File Name Packet 


Symbolic Offset Description 
ACR$T_FILENAME Name of the file (counted ASCII string that gives full file 
specification). 


C.1.2.3 Identification Packet (ACR$K_ID) 


The identification packet identifies the process that caused the record to be 
logged. 


Figure C—4 shows the format of the identification packet. Table C—8 describes the 
fields contained in the packet. See Section C.1.2.1 for information on the packet 
header. 


Figure C—4 Format of an Identification Packet 
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Table C-8 Data Fields in an Identification Packet 


Symbolic Offset 


ACR$L_PID 
ACR$L_OWNER 
ACR$L_UIC 


ACR$Q_PRIV 
ACR$B_PRI 
ACR$W_USERNAME 


ACR$W_ACCOUNT 
ACR$W_NODENAME 
ACR$W_TERMINAL 


ACR$W_JOBNAME 
ACR$L_JOBID 


ACR$W_QUEUE 
ACR$W_NODEADDR 


ACR$W_REMOTEID 


Description 


Process identification (PID) of the process. (longword) 
PID of the parent process. (longword) 


UIC of the process. The UIC can be addressed as two separate 
words: ACR$W_MEM for the member number, and ACR$W_ 
GRP for the group number. (longword) 


Privileges held by the process. (quadword) 
Base priority of the process. (byte) 


Offset to counted ASCII string containing the user name of the 
process. (word) 


Offset to counted ASCII string containing the account name of 
the process. (word) 


Offset to counted ASCII string containing the node name of the 
remote process. (word) 


Offset to counted ASCII string containing the terminal name. 
(word) 


Offset to counted ASCII string containing the job name. (word) 


Identification of the print or batch job (queue entry number). 
(longword) 


Offset to counted ASCII string containing the name of the 
queue with which a batch or print job is associated. (word) 


Offset to a counted binary string containing the remote node 
address. (word) 


Offset to counted ASCII string containing the remote ID of the 
remote process (varies with network implementation and use). 
(word) 


C.1.2.4 Image Name Packet (ACR$K_IMAGENAME) 


The image name packet contains the name of the image executed by the identified 


process. 


Figure C-—5 shows the format of the image name packet. Table C—9 describes the 
field contained in the packet. See Section C.1.2.1 for information on the packet 


header. 
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Figure C—-5 Format of an Image Name Packet 
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Table C-9 Data Fields in an Image Name Packet 
Symbolic Offset Description 
ACR$T_IMAGENAME Name of the image (counted ASCII string that gives full file 
specification). 


C.1.2.5 Print Resource Packet (ACR$K_PRINT) 


The print resource packet contains information about print jobs. 


Figure C-6 shows the format of the print resource packet. Table C—10 describes 
the fields contained in the packet. See Section C.1.2.1 for information on the 
packet header. 


Figure C-6 Format of a Print Resource Packet 
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Table C—10 Data Fields in a Print Resource Packet 


Symbolic Offset Description 

ACR$L_PRINTSTS Status of the print job. (longword) 

ACR$Q_QUETIME Time the job was queued. (64-bit absolute time) 
ACR$Q_BEGTIME Time the job was started. (64-bit absolute time) 
ACR$L_SYMCPUTIM Symbiont CPU time (always zero). (longword) 
ACR$L_PAGECNT Number of pages printed. (longword) 

ACR$L_QIOCNT Number of QIOs issued to the printer. (longword) : 
ACR$L_GETCNT Number of GETs from the file that was printed. (longword) 


C.1.2.6 Resource Packet (ACR$K_RESOURCE) . 
The resource packet contains information about the identified process. 


Figure C—7 shows the format of a resource packet. Table C—11 describes the 
fields contained in the packet. See Section C.1.2.1 for information on the packet 
header. 


Figure C-7 Format of a Resource Packet 
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Table C-11 Data Fields in a Resource Packet 


Symbolic Offset 
ACR$Q_ LOGIN 


ACR$L_STATUS 
ACR$L_IMGCNT 
ACR$L_CPUTIME 
ACR$L_FAULTS 
ACR$L_FAULTIO 
ACR$L_WSPEAK 


ACR$L_PAGEFL 
ACR$L_DIOCNT 


ACR$L_BIOCNT 


ACR$L_VOLUMES 


ACR$L_VP_CPUTIME 


Description 
64-bit absolute time at which the image was run or the process 
was created. (quadword) 


Final exit status of the image, or for a process, the final status 
of the last image executed in the process. (longword) 


Number of images run by the process. (longword) 


Total CPU time used by the image or process, measured in 
units of 10 milliseconds. This includes any vector CPU time. 
(longword) 


Number of hard and soft page faults incurred by the image or 
process. (longword) 


Number of hard page faults incurred by the image or process. 
(longword) 


Maximum working set size used by the image or process. 
(longword) 


Maximum page file usage. (longword) 


Number of direct I/Os made by the image or process. 
(longword) 


Number of buffered I/Os made by the image or process. 
(longword) 


Number of volumes mounted by the image or process. 
(longword) 


Vector CPU time used by the image or process, measured in 
units of 10 milliseconds. (longword) 


C.1.2.7 User Data Packet (ACR$K_USER_DATA) 
The user data packet contains an accounting message sent by the $SNDJBC 


C-10 


system service. 


Figure C—8 shows the format of the user data packet. Table C—12 describes the 
fields contained in the packet. See Section C.1.2.1 for information on the packet 


header. 


Accounting Information for Programmers 
C.1 Format of an Accounting File Record 


Figure C-8 Format of a User Data Packet 
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Table C-12 Data Fields in a User Data Packet 
Symbolic Offset Description 


ACR$T_USER_DATA Up to 255 bytes of data (counted string). 
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ANALYZE/DISK_STRUCTURE—Stage Checks 


ANALYZE/DISK_STRUCTURE performs the verification of a volume or volume 
set in eight distinct stages. During these stages, ANALYZE/DISK_STRUCTURE 
compiles information that is used in reporting errors and performing repairs. 


Before ANALYZE/DISK_STRUCTURE can proceed with each stage, it must 
perform the following four initialization functions: 


e Read the device name, validate access to the device, and save the device name 


¢ Read the user-specified file names for the /LIST and /USAGE qualifiers, if 
specified, and open the files 


e Assign all appropriate channels to the device being checked 
e Write-lock the volume set to prevent simultaneous updates 


The following sections describe the eight stages that ANALYZE/DISK_ 
STRUCTURE goes through while verifying a disk. These descriptions assume 
that you specified the /REPAIR qualifier in the command. An annotated 
ANALYZE/DISK_STRUCTURE listing is included at the end of this appendix. 


D.1 Stage 1 


In Stage 1, ANALYZE/DISK_STRUCTURE gathers various volume information 
(such as cluster size, volume labels, and the number of volumes in the set) 
from several reserved files, verifies the information for accuracy, reports all 
discrepancies, and corrects problems discovered during this stage. 


ANALYZE/DISK_STRUCTURE identifies the volume and all the characteristics 
of that volume by using the parameters of the home block in INDEXF.SYS. When 
ANALYZE/DISK_STRUCTURE confirms this information, it builds a current 
version of VOLSET.SYS in memory and reads and verifies the status control 
block (SCB) of BITMAP.SYS. 


ANALYZE/DISK_STRUCTURE then compares the volume-set attributes for 
the version of VOLSET.SYS in memory to the attributes listed in the version of 
VOLSET.SYS resident on the volume, reports discrepancies, and corrects errors. 


D.2 Stage 2 


In Stage 2, ANALYZE/DISK_STRUCTURE copies the current version of 
QUOTA.SYS into working memory, and establishes the structure on which 
another QUOTA.SYS file is built during subsequent stages. In Stage 7, these 
copies are compared with each other and inconsistencies are reported. 
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D.3 Stage 3 


D.3 Stage 3 


Stage 3 checks consist of ANALYZE/DISK_STRUCTURE operations that use the 
reserved file INDEXF.SYS. During Stage 3, ANALYZE/DISK_STRUCTURE opens 
INDEXE\SYS, reads each file header, and completes the following steps: 


¢ Validates each file’s FID, and confirms that all files can be retrieved through 
the FID 


e Validates the header and the revision date of each file 
e Validates any extension headers of each file 


¢ Confirms that each segment number reflects the proper sequence of extension 
headers 


ANALYZE/DISK_STRUCTURE also does the following during Stage 3: 
¢ Builds a map of header linkage so that ambiguities can be detected 


e Determines the high block (HIBLK) and end-of-file block (EFBLK) 
record attributes and compares these values with the recorded values in 
INDEXF.SYS 


¢ Checks the high-water mark (HIWATERMARK) 


While performing these checks, ANALYZE/DISK_STRUCTURE builds several 
maps that it uses in subsequent stages. Table D-1 briefly describes each map 
built in Stage 3. 


Table D-1 Stage 3 Maps 


Bitmap Function 


Valid file numbers ‘The current state of the bitmap for INDEXF.SYS 
Lost file numbers All the valid file numbers not yet found in a directory 
Directory files List of all directory files 

Extension linkages List of all valid extension headers 


Multiply-allocated clusters List of all clusters that are referenced by more than 
one header 


Allocated clusters All allocated clusters on the volume (or volume set) 
System map The new storage bitmap 

Valid file backlink A map of all valid file backlinks 

Invalid backlink A map of all invalid backlinks 


D.4 Stage 4 


In Stage 4, ANALYZE/DISK_STRUCTURE builds a current version of 
BITMAP.SYS using the maps built during Stage 3. In addition, ANALYZE | 
/DISK_STRUCTURE reports any discrepancies between the headers’ maps 
and the storage bitmap. In Stage 4, ANALYZE/DISK_STRUCTURE does the 
following: 


¢ Copies BITMAP.SYS into working memory 


¢ Compares the corrected version of BITMAP.SYS with a map built from 
INDEXF.SYS 
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e Writes a corrected version of BITMAPSYS to disk 


¢ Reports multiply-allocated clusters 


D.5 Stage 5 


In this stage, ANALYZE/DISK_STRUCTURE completes a pass of all entries in 
the invalid backlink map. ANALYZE/DISK_STRUCTURE searches the directory 
hierarchy of the volume to confirm that all files included in INDEXF:‘SYS are 
retrievable through the directory structure. In addition, ANALYZE/DISK_ 
STRUCTURE identifies lost directories and attempts to reestablish valid 
backlinks to those directories. 


In Stage 5, ANALYZE/DISK_STRUCTURE does the following: 


¢ Confirms the locations of all directories listed in the directory map (compiled 
in Stage 3) and the subsequent files in those directories 


e Enters all directories indicated as lost and locates a valid parent (if any) 


D.6 Stage 6 


Stage 6 is essentially a cleanup operation for lost file headers. Following Stage 5, 
ANALYZE/DISK_STRUCTURE is left with a list of files that are truly lost—files 
that have backlinks to nonexistent directories. These files were not traceable 
through the directory structure. ANALYZE/DISK_STRUCTURE is also left with 
a list of files with bad backlinks; these files are traceable through the directory 
structure, but the backlinks of the files do not point back to the directory that 
contains them. 


During Stage 6, ANALYZE/DISK_STRUCTURE does the following: 


e Checks the backlink map to locate all files with invalid backlinks, then 
repairs backlinks 


e _ Checks the lost file bitmap for lost files and places lost files in [SYSLOST] if 
you specified /REPAIR. 


e If you specified the /USAGE qualifier, creates an entry for each lost file 


D.7 Stage 7 


In this stage, ANALYZE/DISK_STRUCTURE compares the values stored in the 
quota file built during Stage 2 with those stored in the reserved file QUOTA.SYS. 
During Stage 7, ANALYZE/DISK_STRUCTURE opens QUOTA.SYS and performs 
the following operations: 


¢ Compares the block usage for each UIC listed in QUOTA.SYS to parallel 
statistics listed in the copy of QUOTA.SYS built in Stage 2. 


¢ Modifies QUOTA.SYS such that values in QUOTA.SYS match values in the 
copy built in Stage 2. 


e Closes QUOTA.SYS 
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D.8 Stage 8 


D.8 Stage 8 


Throughout the first seven stages, ANALYZE/DISK_STRUCTURE places 
operations that cannot be performed during a particular stage on a deferred 
list. The list includes FIDs sorted by operation. In Stage 8, ANALYZE/DISK_ . 
STRUCTURE performs all operations stored on the deferred list. In Stage 8, 
ANALYZE/DISK_STRUCTURE does the following: 


Removes an FID from the deferred list, renames the file, and adds the file to 
SYSLOST.DIR or to a user-specified directory 


Updates QUOTA.SYS to reflect all additional blocks used by the UIC that 
received the lost file 


Updates VOLSET.SYS to correct inconsistencies discovered during previous 
ANALYZE/DISK_STRUCTURE stages 


D.9 Annotated Example 


Example D-1 is an annotated example of an ANALYZE/DISK_STRUCTURE 
session. The command used to generate this example did not include the 
/REPAIR qualifier. 


Example D-1 ANALYZE/DISK_STRUCTURE—Annotated Example 


$VERIFY-I-BADHEADER, 
invalid file 
$VERIFY-I-BADHEADER, 
invalid file 
$VERIFY-I-BADHEADER, 
invalid file 
%VERIFY-J~BADHEADER, 
invalid file 
$VERIFY-I-BADHEADER, 
invalid file 
$VERIFY-I-BADHEADER, 
invalid file 
$VERIFY-I-BADHEADER, 
invalid file 
$VERIFY-I-BADHEADER, 
invalid file 
$VERIFY-I-BADHEADER, 
invalid file 
$VERIFY-I-BADHEADER, 
invalid file 
$VERIFY-I-BADHEADER, 
invalid file 
$VERIFY-I-BADHEADER, 
invalid file 
$VERIFY-I-BADHEADER, 
invalid file 
$VERIFY-I-~BADHEADER, 
invalid file 
$VERIFY-I-BADHEADER, 
invalid file 
$VERIFY-I-BADHEADER, 
invalid file 
%VERIFY-I-BADHEADER, 
invalid file 
$VERIFY-I-BADHEADER, 
invalid file 
$VERIFY-I-BADHEADER, 
invalid file 


D-4 


file (487,173,1) MATL$0004008EEAEE0572.MAI;1 1) 


header 

file (531,112,1) MAIL$0004008EEFBB198B.MAI;1 
header 

file (589,104,1) MAIL$0004008EEAF199B9.MAI;1 
header 

file (604,157,1) MAIL$0004008EF12C3B28.MAI;1 
header 

file (674,247,1) MAIL$0004008EF6053C9B.MAI;1 
header 

file (688,41,1) MAILSO004008EF608AFF4.MAI;1 
header 

file (689,135,1) MAIL$0004008EEE445A31.MAI;1 
header 

file (750,71,1) MAIL$0004008EEED19ADF.MAI;1 
header 

file (753,217,1) MAIL$0004008EE7C4A017.MAI;1 
header 

file (780,236,1) MAIL$0004008EF777ACA8.MAI;1 
header 

file (852,57,1) MAIL$0004008EFO6C15F6.MAI;1 
header 

file (856,44,1) MAIL$0004008EE7D2520D.MAI;1 
header 

file (1059,42,1) MAIL$0004008EEB045608.MAI;1 
header 

file (1134,76,1) MAIL$0004008EE9EC806D.MAI;1 
header 

file (1316,147,1) MAILS0004008EEEDA734F .MAI;1 
header 

file (1350,74,1) MAIL$0004008EE89BA8B0.MAI;1 
header 

file (1351,64,1) MAIL$0004008EEB09B036.MAI;1 
header 

file (1490,104,1) MAIL$0004008EE8B448B0.MAI;1 
header 

file (1493,106,1) LASTNOTIC.NIL;1 

header 
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%VERIFY-I-BADHEADER, 
invalid file 
$VERIFY-I-BADHEADER, 
invalid file 
$VERIFY-I-BADHEADER, 
invalid file 
$VERIFY-I-BADHEADER, 
invalid file 
$VERIFY-I-BADHEADER, 
invalid file 
$VERIFY-I-BADHEADER, 
invalid file 
$VERIFY-I-BADHEADER, 
invalid file 
$VERIFY-I-BADHEADER, 
invalid file 
$VERIFY-I-BADHEADER, 
invalid file 
$VERIFY-I-BADHEADER, 
invalid file 
$VERIFY-I-BADHEADER, 
invalid file 
$VERIFY-I-BADHEADER, 


file (1548,204,1) MAIL$0004008EF7B4D1B8.MAI;1 
header 

file (1613,61,1) MAITL$0004008EECEE4BA5.MAI;1 
header 

file (1812,81,1) MAILS$0004008EE7DFO5EC.MAI;1 
header 

file (1848,26,1) MAIL$0004008EF78659B9.MAI;1 
header 

file (1983,34119,1) MAIL$0004008EE7E49C13.MAI;1 
header 

file (1987,33907,1) REMIND.CAL;9 

header 

file (2196,123,1) MAIL$0004008EE6FA2DC9.MAI;1 
header 

file (2372,125,1) MAILS0004008EF06339F9.MAI;1 
header 

file (2569,67,1) MAILS0004008EF2BF0C15.MAI;1 
header 

file (2605,72,1) MAIL$0004008EE856FC73.MAI;1 
header 

file (2616,70,1) MAILS0004008EF063CO4F.MAI;1 
header 

file (2774,29818,1) LASTNOTIC.NIL;1 


invalid file header 

$VERIFY-I-ALLOCCLR, blocks incorrectly marked allocated 2] 
LBN 442398 to 445538, RVN 1 

tVERIFY-I-BADHEADER, file (487,0,1) MAIL$0004008EEAEE0572.MAI;1 3) 
invalid file header 

$VERIFY-I-LOSTEXTHDR, file (487,0,1) 
lost extension file header 

$VERIFY-I-BADHEADER, file (531,0,1) MAIL$0004008EEFBB198B.MAI;1 
invalid file header 

$VERIFY-I-LOSTEXTHDR, file (531,0,1) 
lost extension file header 

$VERIFY-I-BADHEADER, file (589,0,1) MAIL$0004008EEAF199B9.MAI;1 
invalid file header 

$VERIFY-I-LOSTEXTHDR, file (589,0,1) 
lost extension file header 

$VERIFY-I-BADHEADER, file (604,0,1) MAIL$0004008EF12C3B28.MAI;1 
invalid file header 

$VERIFY-I-LOSTEXTHDR, file (604,0,1) 
lost extension file header 

$VERIFY-I-BADHEADER, file (674,0,1) MAIL$0004008EF6053C9B.MAI;1 
invalid file header 

@VERIFY-I-LOSTEXTHDR, file (674,0,1) 
lost extension file header 

$VERIFY-I-BADHEADER, file (688,0,1) MAILSOQ04008EF608AFF4.MAI;1 
invalid file header 

$VERIFY-I-LOSTEXTHDR, file (688,0,1) 
lost extension file header 

$VERIFY-I-BADHEADER, file (689,0,1) MAIL$0004008EEE445A31.MAI;1 
invalid file header 

$VERIFY-I-LOSTEXTHDR, file (689,0,1) 
lost extension file header 

$VERIFY-I-BADHEADER, file (750,0,1) MATL$0004008EEED19ADF.MAI;1 
invalid file header 

$VERIFY-I-LOSTEXTHDR, file (750,0,1) 
lost extension file header 

$VERIFY-I-BADHEADER, file (753,0,1) MAIL$0004008EE7C4A017.MAI;1 
invalid file header 

$VERIFY-I-LOSTEXTHDR, file (753,0,1) 
lost extension file header 

$VERIFY-I-BADHEADER, file (780,0,1) MAIL$0004008EF777ACA8.MAI;1 
invalid file header 

$VERIFY-I-LOSTEXTHDR, file (780,0,1) 
lost extension file header 

$VERIFY-I-BADHEADER, file (852,0,1) MAILSO004008EFO6C15F6.MAI;1 
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Example D-1 (Cont.) ANALYZE/DISK_STRUCTURE—Annotated Example 


invalid file header 

$VERIFY-I-LOSTEXTHDR, file (852,0,1) 
lost extension file header 

$VERIFY-I-BADHEADER, file (856,0,1) MAIL$0004008EE7D2520D.MAI;1 
invalid file header 

$VERIFY-I-LOSTEXTHDR, file (856,0,1) 
lost extension file header 

%VERIFY-I-BADHEADER, file (1059,0,1) MAIL$0004008EEB045608.MAI;1 
invalid file header 

$VERIFY-I-LOSTEXTHDR, file (1059,0,1) 
lost extension file header 

$VERIFY-I-BADHEADER, file (1134,0,1) MAIL$0004008EE9EC806D.MAI;1 
invalid file header 

SVERIFY-I-LOSTEXTHDR, file (1134,0,1) 
lost extension file header 

$VERIFY-I-BADHEADER, file (1316,0,1) MAILS$0004008EEEDA734F.MAI;1 
invalid file header 

$VERIFY-I-LOSTEXTHDR, file (1316,0,1) 
lost extension file header 

$VERIFY-I-BADHEADER, file (1350,0,1) MAIL$0004008EFE89BA8B0.MAI;1 
invalid file header 

$VERIFY-I-LOSTEXTHDR, file (1350,0,1) 
lost extension file header 

$VERIFY-I-BADHEADER, file (1351,0,1) MAIL$0004008EEB09B036.MAI;1 
invalid file header 

$VERIFY-I-LOSTEXTHDR, file (1351,0,1) 
lost extension file header 

$VERIFY-I-BADHEADER, file (1490,0,1) MAIL$0004008EFE8B448B0.MAI;1 
invalid file header 

$VERIFY-I-LOSTEXTHDR, file (1490,0,1) 
lost extension file header 

$VERIFY-I-BADHEADER, file (1493,0,1) LASTNOTIC.NIL;1 
invalid file header 

$VERIFY-I-LOSTEXTHDR, file (1493,0,1) 
lost extension file header 

%VERIFY-I-BADHEADER, file (1548,0,1) MAIL$0004008EF7B4D1B8.MAI;1 
invalid file header 

$VERIFY-I-LOSTEXTHDR, file (1548,0,1) 
lost extension file header 

$VERIFY-I-BADHEADER, file (1613,0,1) MAIL$0004008EECEE4BA5 .MAI; 1 
invalid file header 


$VERIFY-I-LOSTEXTHDR, file (1613,0,1) 
lost extension file header 

$VERIFY-I-BADHEADER, file (1812,0,1) MAIL$0004008EE7DFO5EC.MAI;1 
invalid file header 

$VERIFY-I-LOSTEXTHDR, file (1812,0,1) 
lost extension file header 

tVERIFY~I-BADHEADER, file (1848,0,1) MAIL$0004008EF78659B9.MAI;1 
invalid file header 

$VERIFY-I-LOSTEXTHDR, file (1848,0,1) 
lost extension file header 

$VERIFY-I-BADHEADER, file (1983,0,1) MAIL$0004008EE7E49C13.MAI;1 
invalid file header 

$VERIFY-I-LOSTEXTHDR, file (1983,0,1) 
lost extension file header 

*tVERIFY-I-BADHEADER, file (1987,0,1) REMIND.CAL;9 
invalid file header 

$VERIFY-I-LOSTEXTHDR, file (1987,0,1) 
lost extension file header 

$VERIFY-I-BADHEADER, file (2196,0,1) MAIL$0004008EE6FA2DC9.MAI;1 
invalid file header 

$VERIFY-I-LOSTEXTHDR, file (2196,0,1) 
lost extension file header 

SVERIFY-I-BADHEADER, file (2372,0,1) MAIL$0004008EF06339F9.MATI;1 
invalid file header 

$VERIFY-I-LOSTEXTHDR, file (2372,0,1) 
lost extension file header 


(continued on next page) 
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$VERIFY-I-BADHEADER, file (2569,0,1) MAIL$S0004008EF2BF0C15.MAI:1 

invalid file header 
$VERIFY-I-LOSTEXTHDR, file (2569,0,1) 

lost extension file header 
$VERIFY-I-BADHEADER, file (2605,0,1) MAILS0004008EE856FC73.MAI;1 

invalid file header 
$VERIFY-I-LOSTEXTHDR, file (2605,0,1) 

lost extension file header 
$VERIFY-I-BADHEADER, file (2616,0,1) MAILS0004008EF063C04F.MAI;1 

invalid file header 
$VERIFY-I-LOSTEXTHDR, file (2616,0,1) 

lost extension file header 
$VERIFY-I-BADHEADER, file (2774,0,1) LASTNOTIC.NIL;1 

invalid file header 
$VERIFY-I-LOSTEXTHDR, file (2774,0,1) 

lost extension file header 
tVERIFY-I-BADDIRENT, invalid file identification in directory entry [ALLWAY]NOTES.LOG;25 © 
$VERIFY-I-BADDIRENT, invalid file identification in directory entry [BLAIN.BOOTS]LOADER.OBJ;1 
$VERIFY-I-BADDIRENT, invalid file identification in directory entry [BLAIN.BOOTS]SYSGEN.OBJ;1 
$VERIFY-I-BADDIRENT, invalid file identification in directory entry [BLAIN]MAIL 20600841.TMP;1 
$VERIFY-I-BADDIRENT, invalid file identification in directory entry [BLAIN]NETSERVER.LOG;181 
$VERIFY-I-BADDIRENT, invalid file identification in directory entry [BLAIN]NETSERVER.LOG; 180 
$VERIFY-I-BADDIRENT, invalid file identification in directory entry [BLAIN]NETSERVER.LOG;179 
$VERIFY-I-BADDIRENT, invalid file identification in directory entry [BLAIN]NETSERVER.LOG;178 
$VERIFY-I-BADDIRENT, invalid file identification in directory entry [BLAIN]NETSERVER.LOG;170 
$VERIFY-I-BADDIRENT, invalid file identification in directory entry [BOEMUS.MAIL]MAIL$0004008EF94A72A0.MAI;1 
$VERIFY-I-BADDIRENT, invalid file identification in directory entry [BOEMUS ]NETSERVER.LOG;10 
$VERIFY-I-BADDIRENT, invalid file identification in directory entry [BOEMUS]UPDATE.LOG;1 
%VERIFY-I-BACKLINK, incorrect directory back link [CALGON.GER]OBJ.DIR;1 
$VERIFY-I-BADDIRENT, invalid file identification in directory entry [CALGON]T.TMP;1 
$VERIFY-I-BACKLINK, incorrect directory back link [CLABIN.BACKUP.TMPSRC]BACKDEF.SDL;1 
$VERIFY-I-BACKLINK, incorrect directory back link [CLABIN.BACKUP.TMPSRC ]COMMON.REQ;1 
$VERIFY-I-BACKLINK, incorrect directory back link [CLABIN.BACKUP.TMPSRC ]DUMMY.MSG;1 
$VERIFY-I-BADDIRENT, invalid file identification in directory entry [CLABIN.NMAIL]NMAIL.LOG;77 
 $VERIFY-I-BADDIRENT, invalid file identification in directory entry [CLABIN.NMAIL]NMAIL.LOG;76 
$VERIFY-I-BADDIRENT, invalid file identification in directory entry [DESIN.8800]2840HT86.GNC;1 
$VERIFY-I-BADDIRENT, invalid file identification in directory entry [DESIN.8800]2840TP86.GNC;1 
$VERIFY-I-BADDIRENT, invalid file identification in directory entry [DOWNE.MAIL]MAIL$0004008EF94A79B3.MAI;1 
¢VERIFY-I-BADDIRENT, invalid file identification in directory entry [DOWNE.PRO]MORT.OBJ;15 
$VERIFY-I-BADDIRENT, invalid file identification in directory entry [DOWNE.PRO]JOUTPUT.LOG; 36 
$VERIFY-I-BADDIRENT, invalid file identification in directory entry [DOWNE.PROJOUTPUT.LOG; 35 
$VERIFY-I-BADDIRENT, invalid file identification in directory entry [DOWNE.PRO]JOUTPUT.LOG; 34 
$VERIFY-I-BADDIRENT, invalid file identification in directory entry [DOWNE.PRO]OUTPUT.LOG; 33 
VERIFY-I-BADDIRENT, invalid file identification in directory entry [DOWNE.PRO]OUTPUT.LOG; 32 
VERIFY-I-BADDIRENT, invalid file identification in directory entry [DOWNE.PRO]OUTPUT.LOG;31 
VERIFY-I-BADDIRENT, invalid file identification in directory entry [DOWNE.PRO]OUTPUT.LOG; 30 
VERIFY-I-BADDIRENT, invalid file identification in directory entry [GAMBLE]CONFLICTS.LIS;1 
$VERIFY-I-BADDIRENT, invalid file identification in directory entry [GAMBLE.DOC]SMP.LOCK;6 
$VERIFY-I-BADDIRENT, invalid file identification in directory entry [GAMBLE ]NETSERVER.LOG;5 
$VERIFY-I-BADDIRENT, invalid file identification in directory entry [GAMBLE.NMAIL]NMAIL.LOG; 22 
$VERIFY-I-BADDIRENT, invalid file identification in directory entry [GAMBLE.NMAIL]NMAIL.LOG;21 
$VERIFY-I-BADDIRENT, invalid file identification in directory entry [GILLEY.MAIL]MAIL$0004008EF94A7B70.MAI;1 
$VERIFY-I-BADDIRENT, invalid file identification in directory entry [GILLEY]NETSERVER.LOG; 657 
$VERIFY-I-BADDIRENT, invalid file identification in 
directory entry [GILLEY]NETSERVER.LOG;656 
$VERIFY-I-BADDIRENT, invalid file identification in directory entry [HALL]2.L0G;33 
VERIFY-I-BADDIRENT, invalid file identification in directory entry [HALL]2.L0G;32 
$VERIFY-I-BADDIRENT, invalid file identification in directory entry [HALL]2.LOG;31 
tVERIFY-I-BADDIRENT, invalid file identification in directory entry [HALL]2.LOG;30 
$VERIFY-I-BADDIRENT, invalid file identification in directory entry [HALL]2.LOG;29 
$VERIFY-I-BADDIRENT, invalid file identification in directory entry [HALL]2.LOG;28 
$VERIFY-I-BADDIRENT, invalid file identification in directory entry [HALL]2.LOG;27 
$VERIFY-I-BADDIRENT, invalid file identification in directory entry [HALL]2.LOG;26 
$VERIFY-I-BADDIRENT, invalid file identification in directory entry [HALL]2.LOG;25 
$VERIFY-I-BADDIRENT, invalid file identification in directory entry [HALL]2.LOG;24 
$VERIFY-I-BADDIRENT, invalid file identification in directory entry [NAMOLLY]NETSERVER.LOG;2 
$VERIFY-I-BADDIRENT, invalid file identification in directory entry [NAMOLLY]NETSERVER.LOG;1 
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$VERIFY-I-BADDIRENT, invalid file identification in directory entry 
VERIFY-I-BADDIRENT, invalid file identification in directory entry 
$VERIFY-I-BADDIR, directory [SYSLOST.BOOTS] has invalid format 


$VERIFY-I-BADDIRENT, 
$VERIFY-I-BADDIRENT, 
$VERIFY-I-BADDIRENT, 
$VERIFY-I-BADDIRENT, 


$VERIFY-I-BADDIRENT, 
$VERIFY-I-BADDIRENT, 


¢VERIFY-I-LOSTSCAN, 
$VERIFY~I-INCQUOTA, 
$VERIFY-I-INCQUOTA, 
$VERIFY-I-INCQUOTA, 


invalid file 
invalid file 
invalid file 
invalid file 


identification 
identification 
identification 
identification 


in directory entry 
in directory entry 
in directory entry 
in directory entry 


[RUSS }082654.L0G;1 
[SCHROEDER.LOGIN ]NETSERVER.LOG;17 


[ THOEN ]NETSERVER. LOG; 374 
[ THOEN ]NETSERVER. LOG; 373 
[ THOEN ]NETSERVER. LOG; 367 
[ THOMAS .MAIL ]MAIL$0004008EF94D75EB.MA 


invalid file identification in directory entry 
invalid file identification in directory entry [THOMAS.MAIL]MAIL$0004008EFD118B44.MAI; 
due to directory errors, lost files will not be entered 8 

QUOTA.SYS indicates 69663 blocks used, actual use is 69740 blocks for [11,402] © 
QUOTA.SYS indicates 1764 blocks used, actual use is 1770 blocks for [12,12] 

QUOTA.SYS indicates 0 blocks used, actual use is 31 blocks for [11,720] 


I;1 
[ THOMAS .MAIL ]MAIL$0004008EF955DDF3.MAI;1 
Tei 


@ ANALYZE/DISK_STRUCTURE has completed the first two stages, and is 
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beginning Stage 3. Stage 1 involves collection and verification of various 
volume information. ANALYZE/DISK_STRUCTURE found no problems with 
volume information. In Stage 2, ANALYZE/DISK_STRUCTURE copies the 
current version of QUOTA.SYS to working memory, and builds the structure 
on which a new copy is built during subsequent stages. The first error 
message is produced by Stage 3. Stage 3 uses the reserved file INDEXF.SYS 
to locate a variety of file problems. Here, Stage 3 detects a number of invalid 
file headers. Note that the error message includes the FID and the file name. 


This error message is produced during Stage 4, during which ANALYZE 
/DISK_STRUCTURE builds a current version of BITMAP.SYS, resolves 
multiple references to extension headers, and corrects discrepancies in the 
map sections of headers. Here, ANALYZE/DISK_STRUCTURE has found 
that the specified logical blocks on the specified relative volume were marked 
allocated in the storage bit map, but were not allocated to a file. 


This message marks the beginning of Stage 5. Here, messages stating “lost 
extension file header” and “invalid file header” indicate that ANALYZE 
/DISK_STRUCTURE is performing a pass of all entries placed on the invalid 
backlink map. This map was created in Stage 3. 


This message marks the beginning of the second phase of Stage 5, in which 
ANALYZE/DISK_STRUCTURE confirms that all files in INDEX.SYS are 
retrievable through the directory structure. Here, the series of “invalid file 
identification ... ” messages indicates those directory entries that did not 
contain a valid file identification. 


This message is produced by Stage 6, which is essentially a cleanup phase 
for lost files. This message indicates that ANALYZE/DISK_STRUCTURE 
encountered errors during the directory scan that were reported in previous 
messages. As a result, the file is not entered in directory [SYSLOST]. 


Here, ANALYZE/DISK_STRUCTURE begins Stage 7, in which it compares 
values stored in the quota file built during Stage 2 with values in the reserved 
file QUOTA.SYS. The last three messages here indicate discrepancies between 
the two files. 


Note that no messages were produced during Stage 8. During Stage 8, 
ANALYZE/DISK_STRUCTURE executes all operations placed on the deferred 
list, and if you specified /REPAIR, updates QUOTA.SYS and VOLSET:SYS as 
necessary. © 


E 


ANALYZE/DISK_STRUCTURE—Usage File 


When you specify the /USAGE qualifier, ANALYZE/DISK_STRUCTURE creates 
a disk usage accounting file. The first record of this file, the identification record, 
contains a summary of the disk and volume characteristics. The identification 
record is followed by many file summary records, one record for each file on the 
disk. Each file summary record contains the owner, size, and name of a file. 


The identification record is characterized by the type code USG$K_IDENT in 
the USG$B_TYPE field of the record. Table E-1 contains a description of all the 
fields in this record. 


Table E-1 Identification Record Format(Length USG$K_IDENT_LEN) 
Field Meaning . 


USG$L_SERIALNUM Serial number of the volume. This is an octal longword value. 


USG$T_STRUCNAM Volume set name (if the volume is part of a volume set). 
For a Files—11 Structure Level 1 volume, this field contains 
binary zeros; for a Files—11 Structure Level 2 volume that 
is not part of a volume set, this field contains spaces. The 
length of this field is USG$S_STRUCNAME. 


USG$T_VOLNAME Volume name of relative volume 1. The length of this field is 
USG$S_VOLNAME. 


USG$T_OWNERNAME Volume owner name. The length of this field is USG$S_ 
OWNERNAME. 


USG$T_FORMAT Volume format type. For a Files—11 Structure Level 1 
volume, this field contains “DECFILE11A”; for a Files—11 
Structure Level 2 volume, this field contains “DECFILE11B”. 
The length of this field is USG$S_FORMAT. 


USG$Q_TIME Quadword system time when this usage file was created. The 
length of this field is USG$S_TIME. 


Each file summary record is characterized by the type code USG$K_FILE in the 
USGS$B_TYPE field of the record. Table E-2 contains a description of all the 
fields in these records. 


ANALYZE/DISK_STRUCTURE—Usage File 
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Table E-2 File Record Format (Length USG$K_FILE_LEN) 
Field Meaning 


USG$L_FILEOWNER File owner UIC. This can be considered as a single longword 
value or as two word values (USG$W_UICMEMBER and 
USG$W_UICGROUP). 


USG$W_UICMEMBER The member field of the file owner UIC. This is an octal word 


value. 

USG$W_UICGROUP The group field of the file owner UIC. This is an octal word 
value. 

USG$L_ALLOCATED Number of blocks allocated to the file, including file headers. 
This is a decimal longword value. 

USG$L_USED Number of blocks used, up to and including the end-of-file 
block. This is a decimal longword value. 

USG$W_DIR_LEN Length of the directory string portion of USG$T_FILESPEC, 
including the brackets. This is a decimal word value. 

USG$W_SPEC_LEN Length of the complete file specification in USG$T_ 
FILESPEC. This is a decimal word value. 

USG$T_FILESPEC File specification, in the following format: 


[dir]Jnam.typ;ver 

This field is of variable length. A file that has more than 
one directory entry is listed under the first file specification 
found. A lost file has an empty directory string “[]” and 
the file name is taken from the file header. In some cases 
this information does not exist; you must take this into 


consideration when you write application programs to process 
the usage file. The length of this field is USG$S_FILESPEC. 


The symbolic names referenced in both the identification and the file summary 
records are defined in the system definition macro $USGDEF. The length of the 
identification record is USG$K_IDENT_LEN. The length of a file summary record 
is USG$K_FILE_LEN. 
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Security Audit Message Format (VAX Only) 


This appendix describes the format of the auditing messages written 

to the security auditing log file on VAX systems. The default audit 

log file SECURITY.AUDIT$JOURNAL is created by default in the 
SYS$COMMON:[SYSMGR] directory. If you are using an AXP system, see 
Appendix G. 


Each security audit record consists of a header packet followed by one or more 
data packets, as shown in Figure F-1. The number of data packets depends on 
the type of information being sent. This appendix describes the format of the 
audit header and its data packets as well as the contents of the data packets. 


Figure F—1 Format of a Security Audit Message 


Packet Type Packet Size 


| Packet Data | 


| Packet Data 








Audit Header 
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F.1 Audit Header Packet 
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Table F-1 describes the fields contained in the audit header packet, illustrated in 


Figure F-2. 


Figure F-2 Audit Header Packet Format 
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Symbols representing the types or subtypes of security events are listed in 
Table F-2. For each audit event record type defined by NSA$W_RECORD_TYPE, 
there is a record subtype defined by the symbol NSA$W_RECORD_SUBTYPE, 


which further defines the event. 


Table F—3 identifies any flags associated with the audited event. 


The symbol NSA$K_MSG_HDR_LENGTH defines the current size of the message 


header (in bytes). 


Security Audit Message Format (VAX Only) 
F.1 Audit Header Packet 


Table F-1 Description of the Audit Header Fields 


Field Symbolic Offset 

Type NSA$W_RECORD_TYPE 
Subtype NSA$W_RECORD_SUBTYPE 
Flags NSA$W_FLAGS 


Packet count NSA$W_PACKET_COUNT 


Record size NSA$W_RECORD_SIZE 


Version NSA$C_VERSION_3 


Facility NSA$W_FACILITY 


Contents 


Indicates the type of event that has occurred. See 
Table F-2 for details. 


Further defines the type of event that has 
occurred. See Table F—2 for details. 


Identifies any flags associated with the audited 
event. See Table F-3 for details. Reserved to 
Digital. (Word) 


Number of data packets in the audit record. 
(Word) 


Total size of the audit message; the size represents 
the header packet plus all its data packets. (Word) 


Indicates the version of the security auditing 
facility. The symbol NSA$C_VERSION_3 indicates 
the current version. (Byte) 


The facility code for the generated event. By 
default, this field is zero, indicating a system- 
generated event. (Word) 


Table F-2 Description of Audit Event Types and Subtypes 


Symbol of Event Type 


NSA$C_MSG_AUDIT 


Subtype and Meaning 
NSA$C_ALARM_STATE 
NSA$C_AUDIT_DISABLED 
NSA$C_AUDIT_ENABLED 
NSA$C_AUDIT_INITIATE 
NSA$C_AUDIT_LOG_FIRST 
NSA$C_AUDIT_LOG_FINAL 
NSA$C_AUDIT_STATE 
NSA$C_AUDIT_TERMINATE 
NSA$C_SNAPSHOT_ABORT 
NSA$C_SNAPSHOT_ACCESS 
NSA$C_SNAPSHOT_SAVE 
NSA$C_SNAPSHOT_STARTUP 


NSA$C_MSG_BREAKIN 


Subtype and Meaning 
NSA$C_BATCH 
NSA$C_DETACHED 
NSA$C_DIALUP 
NSA$C_LOCAL 
NSA$C_NETWORK 
NSA$C_REMOTE 
NSA$C_SUBPROCESS 


NSA$C_MSG_CONNECTION 


Meaning 


Systemwide change to auditing 


Events enabled as alarms 

Audit events disabled 

Audit events enabled 

Audit server startup 

First entry in audit log (backward link) 
Final entry in audit log (forward link) 
Events enabled as audits 

Audit server shutdown 

System snapshot attempt has aborted 
Snapshot file access/deaccess 

System snapshot save in progress 
System booted from a snapshot file 


Break-in attempt detected 


Batch process 

Detached process 

Dialup interactive process 

Local interactive process 

Network server task 

Interactive process from another network node 
Subprocess 


Logical link connection or termination 
(continued on next page) 
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F.1 Audit Header Packet 


Table F—2 (Cont.) Description of Audit Event Types and Subtypes 


Symbol of Event Type 


Subtype and Meaning 
NSA$C_CNX_ABORT 
NSA$C_CNX_ACCEPT 
NSA$C_CNX_DECNET_CREATE 
NSA$C_CNX_DECNET_DELETE 
NSA$C_CNX_DISCONNECT 
NSA$C_CNX_INC_ABORT 
NSA$C_CNX_INC_ACCEPT 
NSA$C_CNX_INC_DISCONNECT 
NSA$C_CNX_INC_REJECT 
NSA$C_CNX_INC_REQUEST 
NSA$C_CNX_IPC_CLOSE 
NSA$C_CNX_IPC_OPEN 
NSA$C_CNX_REJECT 
NSA$C_CNX_REQUEST 


NSA$C_MSG_INSTALL 


Subtype and Meaning 
NSA$C_INSTALL_ADD 
NSA$C_INSTALL_REMOVE 


NSA$C_MSG_LOGFAIL 


Subtype and Meaning 
See subtypes for 
NSA$C_MSG_BREAKIN 


NSA$C_MSG_LOGIN 


Subtype and Meaning 
See subtypes for 
NSA$C_MSG_BREAKIN 


NSA$C_MSG_LOGOUT 


Subtype and Meaning 
See subtypes for 
NSA$C_MSG_BREAKIN 


NSA$C_MSG_MOUNT 


Subtype and Meaning 
NSA$C_VOL_DISMOUNT 
NSA$C_VOL_MOUNT 


NSA$C_MSG_NCP 


Subtype and Meaning 
NSA$C_NCP_COMMAND 


NSA$C_MSG_NETPROXY 


Subtype and Meaning 
NSA$C_NETPROXY_ADD 
NSA$C_NETPROXY_DELETE 
NSA$C_NETPROXY_MODIFY 


NSA$C_MSG_OBJ_ACCESS 


Subtype and Meaning 
NSA$C_OBJ_ACCESS 


NSA$C_MSG_OBJ_CREATE 
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Meaning 


Connection aborted 

Connection accepted 

DECnet logical link created 

DECnet logical link disconnected 

Connection disconnected 

Incoming connection request aborted 
Incoming connection request accepted 
Incoming connection disconnected 

Incoming connection request rejected 
Incoming connection request 

Interprocess communication association closed 
Interprocess communication association opened 
Connection rejected 

Connection requested 


Use of the Install utility INSTALL) 


Known image installed 
Known image deleted 


Login failure 


Successful login 


Successful logout 


Volume mount or dismount 


Volume dismount 
Volume mount 


Modification to network configuration database 


Network Control Program (NCP) command issued 


Modification to network proxy database 


Record added to network proxy authorization file 
Record removed from network proxy authorization file 
Record modified in network proxy authorization file 


Object access attempted 


Access attempted to create, delete, or deaccess an object 
Object creation attempted 


(continued on next page) 
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Table F—2 (Cont.) Description of Audit Event Types and Subtypes 


Symbol of Event Type 


Subtype and Meaning 
NSA$C_OBJ_CREATE 


NSA$C_MSG_OBJ_DEACCESS 


Subtype and Meaning 
NSA$C_OBJ_DEACCESS 


NSA$C_MSG_OBJ_DELETE 


Subtype and Meaning 
NSA$C_OBJ_DELETE 


NSA$C_MSG_PROCESS 


Subtype and Meaning 
NSA$C_PRC_CANWAK 
NSA$C_PRC_CREPRC 
NSA$C_PRC_DELPRC 
NSA$C_PRC_FORCEX 
NSA$C_PRC_GETJPI 
NSA$C_PRC_GRANTID 
NSA$C_PRC_RESUME 
NSA$C_PRC_REVOKID 
NSA$C_PRC_SCHDWK 
NSA$C_PRC_SETPRI 
NSA$C_PRC_SIGPRC 
NSA$C_PRC_SUSPND 
NSA$C_PRC_TERM 
NSA$C_PRC_WAKE 


NSA$C_MSG_PRVAUD 


Subtype and Meaning 
NSA$C_PRVAUD_FAILURE 
NSA$C_PRVAUD_SUCCESS 


NSA$C_MSG_RIGHTSDB 


Subtype and Meaning 
NSA$C_RDB_ADD_ID 
NSA$C_RDB_CREATE 
NSA$C_RDB_GRANT_ID 
NSA$C_RDB_MOD_HOLDER 
NSA$C_RDB_MOD_ID 
NSA$C_RDB_REM_ID 
NSA$C_RDB_REVOKE_ID 


NSA$C_MSG_SYSGEN 


Subtype and Meaning 
NSA$C_SYSGEN_SET 


NSA$C_MSG_SYSTIME 


Subtype and Meaning 
NSA$C_SYSTIM_SET 
NSA$C_SYSTIM_CAL 


NSA$C_MSG_SYSUAF 


Meaning 


Access attempted to create an object 


Object deaccessed 


Attempt to complete access to an object 
Object deletion attempted 


Object deletion attempted 


Process controlled through a system service 


Process wakeup canceled 

Process created 

Process deleted 

Process exit forced 

Process information gathered 

Process identifier granted 

Process resumed 

Process identifier revoked 

Process wakeup scheduled 

Process priority altered 

Process exception issued 

Process suspended . 
Process termination notification requested 
Process wakeup issued 


Use of privilege 


Unsuccessful use of privilege 
Successful use of privilege 


Modification to the rights database 


Identifier added to rights database 
Rights database created 

Identifier granted to user 

List of identifier holders modified 
Identifier name or attributes modified 
Identifier removed from rights database 
Identifier taken away from user 


Use of the System Generation utility (SYSGEN) 


System Generation utility (SYSGEN) parameter modified 
Modification to system time 


System time set 
System time calibrated 


Modification to system user authorization file (SYSUAF) 


(continued on next page) 
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Security Audit Message Format (VAX Only) 
F.1 Audit Header Packet 


Table F-2 (Cont.) Description of Audit Event Types and Subtypes 


Symbol of Event Type Meaning 

Subtype and Meaning 
NSA$C_SYSUAF_ADD Record added to system user authorization file 
NSA$C_SYSUAF_COPY Record copied in system user authorization file 
NSA$C_SYSUAF_DELETE Record deleted from system user authorization file 
NSA$C_SYSUAF_MODIFY Record modified in system user authorization file 
NSA$C_SYSUAF_RENAME Record renamed in system user authorization file 


Table F-3 Description of Audit Event Flags 


Symbol" Meaning 

NSA$M_ACL Event generated by an alarm access control entry (ACE) or an audit 
ACE. 

NSA$M_ALARM Event is a security alarm. 

NSA$M_AUDIT Event is a security audit. 

NSA$M_FLUSH Event forced the audit server to write all buffered event messages to 
the audit log file. 

NSA$M_FOREIGN Event occurred outside of the system trusted computing base. 

NSA$M_MANDATORY . Event resulted from a mandatory process audit. 


1All other flags are reserved by Digital. 


F.2 Audit Data Packets 


Figure F-3 illustrates the format of an audit data packet. NSA$K_PKT_HDR_ 
LENGTH defines the current size of each packet header (in bytes). 


Note that audit data packets do not appear in any predefined order within an 
event message, and packet types can appear more than once throughout the event 
message. 


For examples of the types of data appearing in different event messages, see the 
appendix of alarm messages in the Security Guide. 


Figure F-3 Audit Data Packet Format 


NSA$PACKET_TYPE NSA$W_PACKET_SIZE 





NSA$R_PACKET_DATA, variable length information area 
Ue ee ee 
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Security Audit Message Format (VAX Only) 
F.2 Audit Data Packets 


Table F—4 describes the fields contained in these packets. 


Table F-4 Description of the Audit Data Packet 


Field Symbolic Offset 
NSA$W_PACKET_SIZE 


NSA$W_PACKET_TYPE 


Packet size 
Packet type 


Packet data NSA$R_PACKET_DATA 


Table F-5 Types of Data in Audit Packets 
Symbol 
NSA$_ACCESS_DESIRED 


NSA$_ACCESS_MODE 
NSA$_ACCOUNT 


NSA$_ALARM_NAME 
NSA$_ASSOCIATION_NAME 


NSA$_AUDIT_FLAGS 


NSA$_AUDIT_NAME 
NSA$_COMMAND_LINE 
NSA$_CONNECTION_ID 


NSA$_DECNET_LINK_ID 
NSA$_DECNET_OBJECT_NAME 
NSA$_DECNET_OBJECT_NUMBER 
NSA$_DEFAULT_USERNAME 


NSA$_DEVICE_NAME 
NSA$_DIRECTORY_ENTRY 


NSA$_DIRECTORY_ID 
NSA$_DIRECTORY_NAME 
NSA$_DISMOUNT_FLAGS 


NSA$_EFC_NAME 
NSA$_EVENT_FACILITY 


Contents 


Indicates the size of the data packet. (Word) 


Indicates the type of data in the packet, as described 
in Table F-5. 


Variable length field containing the packet data. 


Packet Contents 


Access requested or granted to the object as defined by 
$ARMDEF (Longword) 


Access mode of the process (Byte) 


Account name associated with the process (String of 1-32 
characters) 


Name of the user (or the security class operators 
terminal) to receive the record (String of 1-32 characters) 


Interprocess communication (IPC) association name 
(String of 1-256 characters) 


Bit mask of enabled or disabled events. This is reserved 
to Digital and supported through VMS V5.5. (40-byte 
record) (String of 1-65 characters) 


Journal file to receive the audit record (String of 1-65 
characters) 


Command line the user entered (String of 1-2048 
characters) 


Interprocess communication (IPC) connection 
identification (Longword) 


DECnet logical link identification (Longword) 
DECnet object name (String of 1-16 characters) 
DECnet object number (Longword) 


Default local user name for incoming network proxy 
requests (String of 1-32 characters) 


Device name where the volume resides (String of 1-64 
characters) 


Directory entry associated with file system operation 
(Longword) 


Directory file identification (Array of 3 words) 
Directory file name 


The $DMTDEF macro in STARLET defines the dismount 
flags; each flag is one quadword. 


Event flag cluster name (String of 1-16 characters) 
Facility code for the generated event (Word) 


(continued on next page) 
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Security Audit Message Format (VAX Only) 


F.2 Audit Data Packets 


Table F-5 (Cont.) Types of Data in Audit Packets 


Symbol 


NSA$_FIELD_NAME 
NSA$_FILE_ID 
NSA$_FINAL_STATUS 
NSA$_HOLDER_NAME 


NSA$_HOLDER_OWNER 
NSA$_ID_ATTRIBUTES 


NSA$_IDENTIFIERS_USED 
NSA$_ID_NAME 
NSA$_ID_NEW_ATTRIBUTES 


NSA$_ID_NEW_NAME 
NSA$_ID_NEW_VALUE 
NSA$_ID_VALUE 
NSA$_ID_VALUE_ASCII 
NSA$_IMAGE_NAME 


NSA$_INSTALL_FILE 
NSA$_INSTALL_ FLAGS 
NSA$_LNM_PARENT_NAME 
NSA$_LNM_TABLE_NAME 
NSA$_LOCAL_USERNAME 
NSA$_LOGICAL_NAME 


NSA$_MAILBOX_UNIT 
NSA$_MATCHING_ACE 
NSA$_MESSAGE 


NSA$_MOUNT_FLAGS 


NSA$_MSGFILNAM 
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Packet Contents 


Name of the field being modified. This is used in 
combination with NSA$_ORIGINAL_DATA and NSA$_ 
NEW_DATA. (String of 1-256 characters) 


File identification (Array of words) 


Status (successful or unsuccessful) causing the auditing 
facility to be invoked (Longword) 


Name of user holding the identifier (String of 1-32 
characters) 


Owner (UIC) of holder (Longword) 


Attributes of the identifier, which are defined by the 
$KGBDEF macro in STARLET (Longword) 


Identifiers (from the access control entry (ACE) granting 
access) used to gain access to the object (Array of 
longwords) 


Name of the identifier (String of 1-82 characters) 


New attributes of the identifier, which are defined by the 
$KGBDEF macro in STARLET (Longword) 


New name of the identifier (String of 1-32 characters) 
New value of the identifier (Longword) 

Value of the identifier (Longword) 

Identification value provided by $IDTOASC (Longword) 


Name of the image being executed when the event took 
place (String of 1-1024 characters) 


The name of the installed file (String of 1-255 characters) 


The INSTALL flags correspond to qualifiers for the 
Install utility (for example, NSA$M_INS_EXECUTE_ 
ONLY); each flag is one longword. 


Name of the parent logical name table (String of 1-31 
characters) 


Name of the logical name table (String of 1-31 
characters) 


User name of the account available for incoming network 
proxy requests (String of 1-32 characters) 


Logical name associated with the device (String of 1-255 
characters) 


Mailbox unit number (Longword) 
ACE granting or denying access (Array of bytes) 


Associated message code; see NSA$_MSGFILNAM for 
translation (Longword) 


The MOUNT flags defined by the $MNTDEF macro in 
STARLET (Longword) 


Message file containing the translation for the message 
code in NSA$_MESSAGE (String of 1-255 characters) 


(continued on next page) 
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F.2 Audit Data Packets 


Table F-5 (Cont.) Types of Data in Audit Packets 


Symbol 


NSA$_NEW_DATA 


NSA$_NEW_IMAGE_NAME 
NSA$_NEW_OWNER 
NSA$_NEW_PRIORITY 
NSA$_NEW_PRIVILEGES 
NSA$_NEW_PROCESS_ID 
NSA$_NEW_PROCESS_NAME 
NSA$_NEW_PROCESS_OWNER 
NSA$_NEW_USERNAME 
NSA$_NOP 
NSA$_OBJECT_CLASS 


NSA$_OBJECT_MAX_CLASS 
NSA$_OBJECT_MIN_CLASS 
NSA$_OBJECT_NAME 
NSA$_OBJECT_NAME_2 
NSA$_OBJECT_OWNER 
NSA$_OBJECT_PROTECTION 
NSA$_OBJECT_TYPE 


NSA$_OLD_PRIORITY 
NSA$_OLD_PRIVILEGES 
NSA$_ORIGINAL_DATA 


NSA$_PARAMS_INUSE 
NSA$_PARAMS_WRITE 


NSA$_PARENT_ID 


NSA$_PARENT_NAME 


Packet Contents 


Contents of the field named in NSA$_FIELD_NAME 
after the event occurred. NSA$ ORIGINAL_DATA 
contains the field contents prior to the event. (String of 
1-n characters) 


Name of the new image (String of 1-1024 characters) 
New process owner (UIC) (Longword) 

New process priority (Longword) 

New privileges (Quadword) 

New identification of the process (Longword) 

New name of the process (String of 1-15 characters) 
New owner (UIC) of the process (Longword) 

New user name (String of 1-32 characters) 

Packet in static event list to omit from processing 


Object class name, as defined by the system or by the 
user. (String of 1-23 characters) 


The minimum access classification of the object. (20-byte 
record) 


The minimum access classification of the object. (20-byte 
record) 


Object’s name (String of 1-255 characters) 


Alternate object name; currently applies to file-backed 
global sections where the alternate name of global 
section is the file name. (String of 1-255 characters) 


UIC or general identifier of the process causing the 
auditable event (Longword) 


UIC-based protection of the object (Vector of words or 
longwords) 


Object’s type code, as listed in $ACLDEF. This is 
supported through VMS V5.5. (String of 1-23 characters) 


Former process priority (Longword) 
Former privileges (Quadword) 


Contents of the field named in NSA$_FIELD_NAME 
before the event occurred. NSA$_NEW_DATA contains 
the field contents following the event. (String of 1-n 
characters) 


Set of parameter values given to the SYSGEN command 
USE (String of 1-255 characters) 


File name for the SYSGEN command WRITE (String of 
1-255 characters) 


Process identification (PID) of the parent process; only 
used when auditing events pertaining to a subprocess 
(Longword) 


Parent’s process name; only used when auditing events 
pertaining to a subprocess (String of 1-15 characters) 


(continued on next page) 
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F.2 Audit Data Packets 


Table F—5 (Cont.) Types of Data in Audit Packets 


Symbol 


NSA$_PARENT_OWNER 
NSA$_PARENT_USERNAME 


NSA$_PASSWORD 


NSA$_PRIVILEGES 
NSA$_PRIVS_MISSING 
NSA$_PRIVS_USED 


NSA$_PROCESS_ID 
NSA$_PROCESS_NAME 
NSA$_REM_ASSOCIATION_NAME 


NSA$_REMOTE_LINK_ID 
NSA$_REMOTE_NODE_ID 
NSA$_REMOTE_NODENAME 


NSA$_REMOTE_USERNAME 
NSA$_REQUEST_NUMBER 


NSA$_RESOURCE_NAME 
NSA$_SECTION_NAME 
NSA$_SNAPSHOT_BOOTFILE 


NSA$_SNAPSHOT_SAVE_FILNAM 


NSA$_SNAPSHOT_TIME 
NSA$_SOURCE_PROCESS_ID 
NSA$_SUBJECT_CLASS 
NSA$_SUBJECT_OWNER 


NSA$_SYSTEM_ID 


NSA$_SYSTEM_NAME 
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Packet Contents 


Owner (UIC) of the parent process (Longword) 


User name associated with the parent process (String of 
1-32 characters) 


Password used in unsuccessful break-in attempt (String 
of 1-32 characters) 


Privilege mask (Quadword) 
Privileges that are lacking (Longword or quadword) 


Privileges used to gain access to the object (Longword or 
quadword) 


PID of the process causing the auditable event 
(Longword) 


Process’ name that caused the auditable event (String of 
1-15 characters) 


Interprocess communication (IPC) remote association 
name (String of 1-256 characters) 


Remote logical link identification number (Longword) 
DECnet address of the remote process (Longword) 


DECnet node name of the remote process (String of 1-6 
characters) 


User name of the remote process (String of 1-32 
characters) 


Request number associated with the system service call. 
(Longword) 


Lock resource name (String of 1-32 characters) 
Global section name (String of 1-42 characters) 


The name of the snapshot boot file, the saved system 
image file from which the system just booted. (String of 
1-255 characters) 


The name of the snapshot save file, which is the original 
location of the snapshot file at the time that the system 
was saved. (String of 1-255 characters) 


The time the picture of the configuration was taken and 
saved in the snapshot boot file. (Quadword) 


Identification of process originating the request 
(Longword) 


The current access class of the process causing the 
auditable event. (A 20-byte record) 


Owner (UIC) of the process causing the event. 
(Longword) 


SCS identification of the cluster node where the event 
took place (SYSGEN parameter SCSSYSTEMID). 
(Longword) 


System Communication Services (SCS) node name where 
the event took place (SYSGEN parameter SCSNODE) 
(String of 1-6 characters) 


(continued on next page) 


Security Audit Message Format (VAX Only) 


F.2 Audit Data Packets 


Table F-5 (Cont.) Types of Data in Audit Packets 


Symbol 
NSA$_SYSTEM_SERVICE_NAME 


NSA$_SYSTIM_NEW 
NSA$_SYSTIM_OLD 
NSA$_TARGET_DEVICE_NAME 
NSA$_TARGET_PROCESS_CLASS 
NSA$_TARGET_PROCESS_ID 
NSA$_TARGET_PROCESS_NAME 
NSA$_TARGET_PROCESS_OWNER 
NSA$_TARGET_USERNAME 
NSA$_TERMINAL 


NSA$_TIME_STAMP 
NSA$_TRANSPORT_NAME 


NSA$_UAF_ ADD 
NSA$_UAF COPY 
NSA$ UAF DELETE 


NSA$_UAF_FIELDS 


NSA$_UAF_MODIFY 
NSA$_UAF_RENAME 
NSA$_UAF_SOURCE 
NSA$_USERNAME 


NSA$_VOLUME_NAME 
NSA$_VOLUME_SET_NAME 


Packet Contents 

Name of the system service associated with the event. 
(String of 1-256 characters) 

New system time (Quadword) 

Old system time (Quadword) 

Target device name (String of 1-64 characters) 

The target process classification. (A 20-byte vector) 
Target process identifier (PID) (Longword) 

Target process name (String of 1-64 characters) 
Target process owner (UIC) (Longword) 

Target user name (String of 1-32 characters) 


Name of the terminal to which the process was connected 
when the auditable event occurred (String of 1-256 
characters) 


The time that the event occurred (Quadword) 


Name of transport: interprocess communication (IPC), 
DECnet, or System Management Integrator (SMI), which 
handles requests from the SYSMAN utility (String of 
1-256 characters) 


Name of the authorization record being added (String of 
1-32 characters) 


Original and new names of the authorization record 
being copied (String of 1-32 characters) 


Name of the authorization record being removed (String 
of 1-82 characters) 


Fields being changed in an authorization record and 
their new values. This is supported through VMS V5.5 
and reserved to Digital. (Quadword bitmask) 


Name of the authorization record being modified (String 
of 1-32 characters) 


Name of the authorization record being renamed (String 
of 1-32 characters) 


User name of the source record for an Authorize utility 
(AUTHORIZE) copy operation (String of 1-32 characters) 


User name of process causing the auditable event (String 
of 1-32 characters) 


Volume name (String of 1-15 characters) 
Volume set name (String of 1-15 characters) 
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Security Audit Message Format (AXP Only) 


This appendix describes the format of AXP system auditing messages 
written to the security auditing log file. The default audit log file 
SECURITY_AUDIT.AUDIT$JOURNAL is created by default in the 
SYS$COMMON:[SYSMGBR] directory. 


Each security audit record consists of a header packet followed by one or more 
data packets, as shown in Figure G—1. The number of data packets depends on 
the type of information being sent. This appendix describes the format of the 
audit header and its data packets as well as the contents of the data packets. 


G.1 Audit Header Packet 


Table G—1 describes the fields contained in the audit header packet, illustrated in 
Figure G-1. 


Figure G—1 Audit Header Packet Format 
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Security Audit Message Format (AXP Only) 


G.1 Audit Header Packet 


Table G—-1 Audit Header Packet 


Field 


type 


subtype 


flags 


packet count 
record size 


version 


facility 


Symbolic Offset 
NSA$W_RECORD_TYPE 


NSA$W_RECORD_ 
SUBTYPE 


NSA$W_FLAGS 


NSA$W_PACKET_COUNT 
NSA$W_REC_SIZE 


NSA$C_VERSION_3 


NSA$W_FACILITY 


Contents 


Indicates the type of event that has 
occurred, as described in Table G—2. 


Further defines the type of event 
that has occurred, as described in 
Table G-3. 


Identifies any flags associated with 
the audited event. Reserved for 
future use. (word) 


Number of data packets in the audit 
record. (word) 


Total size of audit message (header 
packet plus all data packets). (word) 


Indicates the version of the security 
auditing facility. The symbol 
NSA$C_VERSION_3 indicates the 
current version. (byte) 


The facility code for the generated 
event. By default, this field is zero, 
indicating a system-generated event. 
(word) 


Table G—2 lists the symbols that represent the type of security event that has 


occurred. 


Table G-2_ NSA$W_RECORD_TYPE Event Types 


Symbol 


NSA$C_MSG_ACCESS 


NSA$C_MSG_AUDIT 


NSA$C_MSG_BREAKIN 
NSA$C_MSG_INSTALL 
NSA$C_MSG_LOGFAIL 
NSA$C_MSG_LOGIN 
NSA$C_MSG_LOGOUT 
NSA$C_MSG_MOUNT 
NSA$C_MSG_NETUAF 
NSA$C_MSG_RIGHTSDB 
NSA$C_MSG_SYSUAF 


Meaning 


Object access attempted 


SET AUDIT command issued 


Breakin attempt detected 
Install utility used to install a file 


Login failure 


Successful login 


Successful logout 

Device mount or dismount 

Modification to network proxy database 
Modification to rights database 

Modification to system authorization database 


For each audit event record type defined by NSA$W_RECORD_TYPE, there is 
a record subtype defined by the symbol NSA$W_RECORD_SUBTYPE, which 
further defines the event. Table G-3 describes those symbols that represent the 


record subtypes. 


Security Audit Message Format (AXP Only) 
G.1 Audit Header Packet 


Table G-3 Audit Record Subtypes 


Symbol Meaning 

Subtypes for NSASC_MSG_ACCESS Record Type 
NSA$C_FILE_ACCESS File access attempted | 
NSA$C_GRPGBL_ACCESS Group global section access attempted 
NSA$C_SYSGBL_ACCESS System global section access attempted 


Subtypes for NSA$C_MSG_AUDIT Record Type 


NSA$C_AUDIT_TERMINATE Audit server shutdown (SET AUDIT 
/SERVER=EXIT) 
NSA$C_AUDIT_INITIATE Audit server startup (SET AUDIT 


/SERVER=START) 


Subtypes for NSA$C_MSG_BREAKIN, NSA$C_MSG_LOGFAIL, 
NSA$C_MSG_LOGIN, and NSA$C_MSG_LOGOUT Record Types 


NSA$C_BATCH - Batch process breakin, login, logout, or login 
failure attempt — 

NSA$C_DETACHED Detached process breakin, login, logout, or login 
failure attempt 

NSA$C_DIALUP Dialup interactive breakin, login, logout, or 
login failure attempt 

NSA$C_LOCAL Local interactive breakin, login, logout, or login 
failure attempt 

NSA$C_NETWORK Network server task breakin, login, logout, or 
login failure attempt 

NSA$C_REMOTE Interactive breakin, login, logout, or login 
failure attempt from another network node 

NSA$C_SUBPROCESS Subprocess breakin, login, logout, or login 


failure attempt © 


Subtypes for NSA$C_MSG_INSTALL Record Type 


NSA$C_INSTALL_ADD Known image installed 
NSA$C_INSTALL_REMOVE Known image deleted 


Subtypes for NSA$C_MSG_MOUNT Record Type 


NSA$C_VOL_DISMOUNT Volume dismount 
NSA$C_VOL_MOUNT Volume mount 
(continued on next page) 


Security Audit Message Format (AXP Only) 
G.1 Audit Header Packet 


Table G-3 (Cont.) Audit Record Subtypes 


Symbol Meaning 
Subtypes for NSA$C_MSG_NETUAF Record Type 

NSA$C_NETUAF_ADD oe added to network proxy authorization 
e 

NSA$C_NETUAF_DELETE Record removed from network proxy 

authorization file 

NSA$C_NETUAF_MODIFY ait modified in network proxy authorization 

e 


Subtypes for NSA$C_MSG_RIGHTSDB Record Type 


NSA$C_RDB_ADD_ID | Identifier added to rights database 
NSA$C_RDB_CREATE Rights database created 
NSA$C_RDB_GRANT_ID Identifier granted to holder 
NSA$C_RDB_MOD_HOLDER Identifier holder list modified 
NSA$C_RDB_MOD_ID Identifier name or attributes modified 
NSA$C_RDB_REM_ID Identifier removed from rights database 
NSA$C_RDB_REVOKE_ID Identifier deleted from holder’s process rights 


list 


Subtypes for NSA$SC_MSG_SYSUAF Record Type 


NSA$C_SYSUAF_ADD Record added to system authorization file 
NSA$C_SYSUAF_COPY Record copied in system authorization file 
NSA$C_SYSUAF_DELETE Record deleted from system authorization file 
NSA$C_SYSUAF_MODIFY Record modified in system authorization file 


NSA$C_SYSUAF_RENAME Record renamed in system authorization file 


In addition, the symbol NSA$R_PACKET_LIST is defined as a pointer to the 
beginning of the first audit data packet. 


G.2 Audit Data Packets 
Figure G—2 illustrates the format of an audit data packet. 


Note that audit data packets do not appear in any predefined order within an 
event message. Packet types can appear more than once throughout the event 
message. 
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Figure G-2 Audit Data Packet Format 


NSA$PACKET_TYPE NSA$W_PACKET_SIZE 


G.2 Audit Data Packets 





NSA$R_PACKET_DATA, variable length information area 


a ee 
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Table G—4 describes the fields contained in these packets. 


Table G-4 Audit Data Packet 
Field Symbolic Offset 


Packet size 
Packet type 


Packet data 


NSA$W_PACKET_SIZE 
NSA$W_PACKET_TYPE 


NSA$R_PACKET_DATA 


Contents 


Indicates the size of the data packet. 
(word) 


Indicates the type of data in the 
packet, as described in Table G—5. 


Variable length field containing the 
packet data. 


Table G—5 identifies the type of data in the audit data packet. 


Table G-5 NSASW_PACKET_TYPE Data Types 


Symbol 
NSA$C_PKT_ACCESS_DESIRED 


NSA$C_PKT_ACCOUNT 


NSA$C_PKT_ALARM_DISABLE 
NSA$C_PKT_ALARM_ENABLE 
NSA$C_PKT_ALARM_NAME 
NSA$C_PKT_AUDIT_NAME 
NSA$C_PKT_DEFAULT_USERNAME 


NSA$C_PKT_DEVICE_NAME 


NSA$C_PKT_DISMOUNT_FLAGS 


Meaning 


The data in the packet contains the access 
requested/granted to the object. (Longword) 


The data in the packet contains the account 
name associated with the process causing the 
auditable event. (ASCII string) 


The data in the packet specifies the security 
events to disable. (Vector) 


The data in the packet specifies the security 
events to enable. (Vector) 


The data in the packet contains the name 

of the user (or the security class operators 
terminal) to which the record will be directed. 
(ASCII string) 


The data in the packet contains the name 
of the journal to which the record will be 
directed. (ASCII string) 


The data in the packet contains the default 
local user name to use for incoming network 
proxy requests. (ASCII string) 


The data in the packet contains the device 
name on which the volume resides. (ASCII 
string) 


The data in the packet contains the dismount 
flags. (Longword) 


(continued on next page) 


Security Audit Message Format (AXP Only) 
G.2 Audit Data Packets 


Table G-5 (Cont.) NSA$W_PACKET_TYPE Data Types 
Symbol Meaning 


NSA$C_PKT_FIELD_NAME The data in the packet contains the name 
of the field being modified. This is used in 
combination with NSA$C_PKT_ORIGINAL_ 
DATA and NSA$C_PKT_NEW_DATA. (ASCII 
string) 


NSA$C_PKT_FINAL_STATUS The data in the packet contains the status 
(error or success) which caused the auditing 
facility to be invoked. (Longword) 


NSA$C_PKT_HOLDER_NAME The data in the packet contains the ID holder 
username. (ASCII string) 
NSA$C_PKT_HOLDER_OWNER The data in the packet contains the owner ID 
for the identifier. (Longword) 
NSA$C_PKT_ID_ATTRIBUTES The data in the packet contains the new 
attributes of the identifier. (Longword) 
NSA$C_PKT_ID_NAME The data in the packet contains the name of 
the identifier. (ASCII string) 
NSA$C_PKT_ID_NEW_NAME The data in the packet contains the new name 
of the identifier. (ASCII string) 
NSA$C_PKT_ID_NEW_VALUE The data in the packet contains the new value 
of the identifier. (Longword) 
NSA$C_PKT_ID_VALUE The data in the packet contains the value of 
the identifier. (Longword) 
NSA$C_PKT_IDENTIFIERS_USED The data in the packet contains any identifiers 


used (from the ACE granting access) to gain 
access to the object. (Longword vector) 


NSA$C_PKT_IMAGE_NAME The data in the packet contains the name 
of the image being executed at the time the 
event took place. (ASCII string) 


NSA$C_PKT_INSTALL_FILE The data in the packet contains the name of 
the installed file. (ASCII string) . 
NSA$C_PKT_INSTALL_FLAGS The data in the packet contains the flags 
associated with the installed file. (Longword) 
NSA$C_PKT_INSTALL_PRIVS The data in the packet contains the privileges 
associated with the installed file. (Quadword) 
NSA$C_PKT_LOCAL_USERNAME The data in the packet contains the user 


names of the accounts that may be used for 
incoming network proxy requests. (ASCII 
string) 


NSA$C_PKT_LOGICAL_NAME The data in the packet contains the logical 
; name associated with the device. (ASCII 
string) 


NSA$C_PKT_MOUNT_FLAGS The data in the packet contains the mount 
flags. (Longword) 


NSA$C_PKT_NEW_DATA The data in the packet contains the value to 
be utilized after the event occurs. (Vector) 


(continued on next page) 
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G.2 Audit Data Packets 


Table G-5 (Cont.) NSA$W_PACKET_TYPE Data Types 


Symbol 
NSA$C_PKT_OBJECT_ID 


NSA$C_PKT_OBJECT_NAME 


NSA$C_PKT_OBJECT_OWNER 


NSA$C_PKT_OBJECT_PROTECTION 


NSA$C_PKT_OBJECT_TYPE 
NSA$C_PKT_ORIGINAL_DATA 


NSA$C_PKT_PARENT_ID 


NSA$C_PKT_PARENT_NAME 


NSA$C_PKT PARENT_OWNER 


NSA$C_PKT_PARENT_USERNAME 


NSA$C_PKT_PASSWORD 


NSA$C_PKT_PRIVS_USED 


NSA$C_PKT_PROCESS_ID 


NSA$C_PKT_PROCESS_NAME 


NSA$C_PKT_REMOTE_NODE_ID 


NSA$C_PKT_REMOTE_NODENAME 


NSA$C_PKT_REMOTE_USERNAME 


Meaning 


The data in the packet contains a unique 
object identification code. Currently this only 
applies to files, and is the file identification 
(file ID). (Longword vector) 


The data in the packet contains the object’s 
name. (ASCII string) 


The data in the packet contains the owner 
identifier (UIC) of the process causing the 
auditable event. (Longword) 


The data in the packet contains the UIC based 
protection of the object. (Word or Longword 
Vector) 


The data in the packet contains the object’s 
type code (see $ACLDEF). (Longword) 


The data in the packet contains the value 
prior to the event taking place. (Vector) 


The data in the packet contains the process 
identification (PID) of the parent process. 
(This is only used when auditing events 
pertaining to a subprocess.) (Longword) 


The data in the packet contains the parent 
process name. (This is only used when 
auditing events pertaining to a subprocess.) 
(ASCII string) 


The data in the packet contains the owner 
identifier (UIC) of the parent process. 
(Longword) 


The data in the packet contains the user name 
associated with the parent process. (ASCII 
string) - 

The data in the packet contains the failing 
password for break-in attempts. (ASCII 
string) 


The data in the packet contains any privileges 
used to gain access to the object. (Longword) 


The data in the packet contains the PID of 
the process that caused the auditable event. 
(Longword) 

The data in the packet contains the process 


name for the process causing the auditable 
event. (ASCII string) 


The data in the packet contains the DECnet 
address of the remote process. (Longword) 


The data in the packet contains the DECnet 
node name of the remote process. (ASCII 
string) 


The data in the packet contains the user name 
of the remote process. (ASCII string) 


(continued on next page) 
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Table G-5 (Cont.) NSA$W_PACKET_TYPE Data Types 
Symbol Meaning 


NSA$C_PKT_REPLY_MAILBOX The data in the packet contains the name of a 
mailbox to which the event completion status 
will be written. (ASCII string) 


NSA$C_PKT_SUBJECT_CLASS The data in the packet contains the current 
access class of the process causing the 
auditable event. (Longword vector) 


NSA$C_PKT_SUBJECT_OWNER The data in the packet contains the owner 
identifier (UIC) of the process causing the 
event. (Longword) 


NSA$C_PKT_SYSTEM_NAME The data in the packet contains the SCS name 
of the node on which the event took place 
(SYSGEN parameter SCSNODE). (ASCII 
string) 


NSA$C_PKT_SYSTEM_ID The data in the packet contains the SCS 
identification of the cluster node on which 
the event took place (SYSGEN parameter 
SCSSYSTEMID). (Longword) 


NSA$C_PKT_TERMINAL The data in the packet contains the name 
of the terminal to which the process was 
connected at the time of the auditable event. 
(ASCII string) 


NSA$C_PKT_TIME_STAMP The data in the packet contains the time that 
the event occurred. (Quadword) 


NSA$C_PKT_UAF_ADD The data in the packet contains the name of 
the authorization record being added. (ASCII 
string) 


NSA$C_PKT_UAF_COPY The data in the packet contains the original 
and new names of the authorization record 
being copied. 


NSA$C_PKT_UAF_DELETE The data in the packet contains the name 
of the authorization record being removed. 
(ASCII string) 


NSA$C_PKT_UAF_FIELDS The data in the packet contains the codes 
indicating the fields being changed in an 
authorization record (along with the new 
value). 


NSA$C_PKT_UAF_MODIFY The data in the packet contains the name 
of the authorization record being modified. 
(ASCII string) 


NSA$C_PKT_UAF_RENAME The data in the packet contains the name 
of the authorization record being renamed. 
(ASCII string) 


NSA$C_PKT_UAF_SOURCE The data in the packet contains the user name 
of the source record used for a copy operation. 
(ASCII string) 


(continued on next page) 
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Table G-5 (Cont.) NSASW_PACKET_TYPE Data Types 
Symbol Meaning 
NSA$C_PKT_USERNAME The data in the packet contains the user 


name associated with the process causing the 
auditable event. (ASCII string) 


NSA$C_PKT_VOLUME_NAME The data in the packet contains the volume 
name. (ASCII string) 
NSA$C_PKT_VOLUME_SET_NAME The data in the packet contains the volume 


set name. (ASCII string) 
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Valid Combinations of BACKUP Qualifiers 


The following figures show the qualifiers that can be used in BACKUP save, 
restore, copy, compare and list operations. The figures also indicate valid 
combinations of BACKUP qualifiers. 


Figure H—-1 shows command qualifiers used in save operations. 

Figure H—2 shows input file-selection qualifiers used in save operations. 
Figure H-3 shows output save-set qualifiers used in save operations. 
Figure H—4 shows command qualifiers used in restore operations. 
Figure H-5 shows input save-set qualifiers used in restore operations. 
Figure H-6 shows output file qualifiers used in restore operations. 
Figure H—7 shows command qualifiers used in copy operations. 

Figure H-8 shows input file-selection qualifiers used in copy operations. 
Figure H—9 shows output file qualifiers used in copy operations. 

Figure H-10 shows command qualifiers used in compare operations. 
Figure H—-11 shows input file-selection qualifiers used in compare operations. 


Figure H—12 shows input save-set qualifiers used in compare operations. 


Valid Combinations of BACKUP Qualifiers 


H-2 


Figure H-1 


Command 
Qualifiers 


ANOJASSIST' 
/BRIEF? 
/DELETE 
/FAST 

/FULL? 
(IGNORE 
MAGE 
/[NO}INITIALIZE 
[INTERCHANGE 
/JOURNAL 
/IST 

/[NOJLOG 
/PHYSICAL 
/RECORD 
NERIFY 
NOLUME 


Input 
File—Selection 
Qualifiers 


/BACKUP 
/BEFORE 
/BY_OWNER 
/CONFIRM 
/CREATED 
/EXCLUDE 
/EXPIRED 
/MODIFIED 
/SINCE 


Output 
File Qualifiers 


/BLOCK_SIZE 
/BY_OWNER 
/COMMENT 
[INO|CRC 
/DENSITY'® 
/GROUP_SIZE 
/LABEL! 
/PROTECTION 
A(NOJREWIND' 
/SAVE_SET® 


/TAPE_EXPIRATION' 


Command Qualifiers Used in Save Operations 


<“<<<<<<<2<<<«<<<< |! 


<<<<<<<«<< 


<<<<<<<<<<< 
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<<<<<<<<< 


ANOJASSIST 


<~<ZzZ<<<<«<<<<«<<1<< 


<<<<<<<<< 


<~<<«<2<<<«<<«<<<«<1!1 <<< 


<<<<<<<~<< 


<<<<<<<<<<< 
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<<<<<<<<<<< 
<<<<<<«<<<<< 


<<<z<<«<<<<<|<<Z< 


<<<<<<< << 


<<<<<<<«<<«<!1<«<«<«<<< 


<<<<<<< << 


<<<z2<<«<<<1<<<<<< 


222222222 
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1 Use only when saving to magnetic tape save sets. 


2 You must specify the /LIST qualifier with this qualifier. 


<<<z<<«<|1<<<«<<<<«< 
<<<z2<<!<<<<«<«<<<< 


<<<<<<< << 


<<<<<<<<< 


MAGE 
/[NOJINITIALIZE 


ANTERCHANGE 
JOURNAL 
AIST 
[INO]LOG 
/PHYSICAL 
/RECORD 
NERIFY 
NOLUME 

YYYYY/Y 
YYNYY Y 
YYNNYY 
YYNYYY 
YYNYYY 
YYyYyYyYY 
YYNYYY 
YYNYYY 
YYNYYY 
YYNYYY 
=,Y°N YY ¥ 
Y"-- NYY Y 
NN- NYN 
YYN-YN 
YYYY- Y 
YYNYY- 
YYNYYN 
YYNYYN 
YYNYYN 
YYNYYN 
YYNYYN 
YYNYYN 
YYNYYN 
YYNYYN 
YYNYYN 
YYYYY/Y 
YYNYYY 
YYYYYY 
YYYYYY 
YYYYYY 
YYYYY/Y 
yYyyYyygy 
YYyYyYY/Y 
YyYyYYY/Y 
yYyyYyyyygy 
yYYyyyygy 


3 When you specify /LIST with /LOG, direct the output from the list operation to a file. 
“You must specify IMAGE with this qualifier. 
. Required when creating save sets on disk. 

® You must specify /REWIND with this qualifier. 
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Valid Combinations of BACKUP Qualifiers 


’ Figure H-2 Input File-Selection Qualifiers Used in Save Operations 


/BACKUP 

/BEFORE 

/BY_OWNER 
/CONFIRM 
/CREATED 
/EXCLUDE 
/EXPIRED 














Input /MODIFIED 
File—Selection /SINCE 
Qualifiers 


/BACKUP -YYYNYNNY 
/BEFORE Y-YYYYVYYN 
/BY_OWNER YY-yYYYYYY 
/CONFIRM YYY-YYYYY 
/CREATED NYYY-YNNY 
/EXCLUDE YYYYY-yYY SY 
/EXPIRED NYYYNY- NY 
/MODIFIED NYYYNYNYY 
/SINCE YNYYYYYY- 
Output 

Save—Set 

Qualifiers 

/BLOCK_SIZE YYYYYYVYVY SY 
/BY_OWNER YYYYYYYY/Y 
/COMMENT YYYYYYYY YY 
/[NO]CRC YYYYYYYYY 
/DENSITY™2 YYYYYYYYY 
/GROUP_SIZE YYYYYYYYY 
/LABEL YYYYYYYY Y 
/PROTECTION YYYYYYVYY Y 
/[NO]REWIND! YYYYYYVYY YY 
/SAVE_SET? ~ YYYYYYYY SY 
/TAPE_EXPIRATION' Y Y Y YY Y Y Y Y 


1 Use only when saving to magnetic tape save sets. 
2 You must specify /REWIND with this qualifier. 
3 Required when creating save sets on disk. 
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Valid Combinations of BACKUP Qualifiers 


Figure H-3 Output Save-Set Qualifiers Used in Save Operations 


/BLOCK_SIZE 


/BY_OWNER 

/COMMENT 

/[NOJ]CRC 

/DENSITY 

/GROUP_SIZE 

/LABEL 
/MEDIA_FORMAT=[NO|COMPACTION 
/PROTECTION 

/[NO]JREWIND 











Input /SAVE_SET 
File-Selection /TAPE_EXPIRATION 
Qualifiers 


/BACKUP YYYYYYYYYYY SY 
/BEFORE YYYYYYYYYYVYY 
/BY_OWNER YYYYYYYYYYYY 
/CONFIRM YYYYYYYYYYYY 
/CREATED YYYYYYYYYYYY¥ 
/EXCLUDE YYYYYYYYYYY YY 
/EXPIRED YYYYYYYYYYYY 
/MODIFIED YYYYYYYYYYY SY 
/SINCE YYYYYYYYYYYY 
Output 

Save—Set 

Qualifiers 

/BLOCK_SIZE -YYYYYYYYYYY 
/BY_OWNER Y-YYYYYYYYYY 
/COMMENT YY-YYYYYYYY SY 
[[NO]CRC YYY-YYYYYYYY 
/DENSITY!’ 2 YYYY-YYYYYYY¥ 
/GROUP_SIZE YYYYY-YYYYYY¥ 
/LABEU YYYYYY-+YYYYY 
/MEDIA_FORMAT=[NO|COMPACTION' YYYYYYY-YYY SY 
/PROTECTION YN VV NON Yom CY 
[INOJREWIND" Yyyyy*yyyy- yy 
/SAVE_SET? YYYYYYYYYY- Y 
/TAPE_EXPIRATION' YYYYYYYYYYY-= 


1 Use only when saving to magnetic tape save sets. 
2 You must specify /REWIND with this qualifier. 
3 Required when creating save sets on disk. 
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Valid Combinations of BACKUP Qualifiers 


Figure H-4 Command Qualifiers Used in Restore Operations 











/FULL 
/IMAGE 
/INCREMENTAL 
/[NOJINITIALIZE 


/PHYSICAL 
/[NOJTRUNCATE 


VERIFY 





Command VOLUME 
Qualifiers 
/[NOJASSIST' -YYYYNYYYYYY 
/BRIEF? YO =- NOY YY ¥oYo (Noy -¥¥ 
/FULL? YN-YYYYYNYY/Y 
/[IMAGE Y Y Y- NY Y YN YY Y 
/ANNCREMENTAL Y Y YN-NY YN YY Y 
/[NOJINITIALIZE NY YY N- Y YN Y Y Y 
/LIST YYYYYY-.YINY YY 
/[NOJLOG YYYYYYY3YNYYY 
/PHYSICAL Y NNNNNNN- N YN 
/[NOJTRUNCATE ON: YS ONE YO ONO UN Gen Sy 
/IVNERIFY Vo Oe YEO AYO ONS OX Ye ee 8 
NNOLUME* YYYYNYYYNYY - 
Input 
Save—Set 
Qualifiers 
/[NO|]JCRC VY VOY YN YY OY NOY YY 
/LABEL YYYYYNYYYYYY 
/[NO]REWIND' Yo “Yo YN YIN YS YON CY OY ¥ 
/SAVE_SET® YYYYYYYYYYYY 
/SELECT Y Y YN YN Y YN Y YN 
Output 
File Qualifiers 
/BY_OWNER Y YYY YY ¥ ¥Y NYY ¥ 
/NEW_VERSION Y Y YN YY Y YN Y N Y 
/OVERLAY Y YY YN YY NY Y NY ¥Y ¥ 
/REPLACE YY YN YYYYNY Y Y 
1 Use only when restoring from magnetic tape save sets. 
2 You must specify the /LIST qualifier with this qualifier. 
3 When you specify /LIST with /LOG, direct the output from the list 
operation to a file. 
“You must specify /IMAGE with this qualifier. 
> Required when restoring save sets from disk. 
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Valid Combinations of BACKUP Qualifiers 


Figure H-5 Input Save-Set Qualifiers Used in Restore Operations 


Input Save-Set 

Qualifiers /[NO|}JCRC 
/[NO|]CRC ~ 
/INOJREWIND' Y 
/SAVE_SET ? Y 
/SELECT Y 


Output File 
Qualifiers 


/BY_OWNER Y 
/NEW_VERSION Y 
/OVERLAY Y 
/REPLACE BA 


/[NO]JREWIND 
Y 


Y 
Y 


<<< 


¥ 


1 Use only when restoring from magnetic tape save sets. 
2 Required when restoring save sets from disk. 


Figure H-6 Output File Qualifiers Used in Restore Operations 


Input Save-Set 


Qualifiers /BY_OWNER 
/INO]JCRC Y 
/[INOJREWIND' Y 
/SAVE_SET 2 Y 
/SELECT Y 
Output File 

Qualifiers 

/BY_OWNER — 
/NEW_VERSION Y 
/OVERLAY Y 
/REPLACE Y 


/NEW_VERSION 
Y 


ba 
Y 
Y 


Y 
N 
N 


1 Use only when restoring from magnetic tape save sets. 
2 Required when restoring save sets from disk. 


/SAVE_SET /SELECT 
Y Y 
Y Y 
- Y 
Y — 
Y Y 
Y Y 
Y Y 
Y Y 
ZK-0833A-GE 
JOVERLAY —/REPLACE: 
Y Y 
Y Y 
Y Y 
Y Y 
Y Y 
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- N 
N <. 
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Valid Combinations of BACKUP Qualifiers 


Figure H-7 Command Qualifiers Used in Copy Operations 


/BRIEF 
/DELETE 
/FAST 
/FULL 
[IGNORE 
/IMAGE 
/[NOJINITIALIZE . 
AIST 


/[NO]JLOG 

/PHYSICAL 
/RECORD 
ANOJTRUNCATE 
NERIFY 
NOLUME 















Command 
Qualifiers 


/BRIEF" - YY NYY YY Y NY Y Y Y 
/DELETE Y- YYYY YY Y NN Y Y Y 
/FAST YY-YYYYYYNYYYY 
/FULL NYY-YYYYYNYYYY 
[AGNORE YYYY-Y YYY¥YY YY Y 
/IMAGE YYYYY-j$%Y YY NY Y Y Y 
/[NOJINITIALIZE YYYYYY--Y YNY Y Y Y 
(LIST YYYYYYY- YY YYYY 
/[NO]LOG YYYYYYYY2-NYYY-Y 
/PHYSICAL NNN NYN NWN N-N N Y N 
/RECORD YNYYYY¥YY¥ YY N- Y Y Y 
[NO]JTRUNCATE YYYYYYYYY NY - Y Y 
NERIFY YYYYYYYYY¥YY ¥ - ¥ 
NOLUME? YYYYYYYYYNY YY - 
Input 

File—Selection 

Qualifiers 

/BACKUP YYYYYNYYYNY Y YN 
/BEFORE YYYYYNY Y YN Y Y Y N 
/BY_OWNER YYYYYN Y Y Y N Y Y Y N 
/CONFIRM YYYYYNY YY NY Y YN 
/CREATED YYYYYN YY YN Y Y YN 
/EXCLUDE YYYYYN YY YN Y Y YN 
/EXPIRED YYYYYNY Y YN Y Y Y N 
/MODIFIED YYYYYNYYYNY Y YN 
/SINCE YYYYYN Y Y YN Y Y Y N 
Output 

File Qualifiers 

/BY_OWNER YYYYYNYYYNY Y YN 
/NEW_VERSION YYY YYN YY Y YN Y Y NN 
/OVERLAY YYYYYNY YY NY Y YN 
/REPLACE YYYYYNY YY NY Y YN 


1 You must specify the /LIST qualifier with this qualifier. 

2 When you specify /LIST with /LOG, direct the output from the list operation 
to a file. 

3 You must specify /IMAGE with this qualifier. 
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Valid Combinations of BACKUP Qualifiers 


Figure H-8 Input File-Selection Qualifiers Used in Copy Operations 


/BACKUP 

/BEFORE 

/BY_OWNER 

/CONFIRM 
/CREATED 
/EXCLUDE 
/EXPIRED 


/MODIFIED 
/SINCE 










Input 
File—Selection 
Qualifiers 


/BACKUP - YY YN Y N N Y 
/BEFORE Y- YYYYY Y N 
/BY_OWNER Ye OY ONG ONE YEE OY 
/CONFIRM ee Ge icine (ae) Gama) Om) Ga) 
/CREATED NYY Y- Y NN Y 
/EXCLUDE YN ON Ne Ye ae CY ONS OF 
/EXPIRED NYY YN Y - N Y 
/MODIFIED NYY YN Y N - Y 
/SINCE YN EY YE OVS Xo os = 
Output 

File Qualifiers 

/BY_OWNER YYYYYYYY Y 
/NEW_VERSION YOOX YO YON ONE ONE OY 
/OVERLAY YON NOON YON YOY. 
/REPLACE ee ame) (eee Gn ae mem mee Game 
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Valid Combinations of BACKUP Qualifiers 


Figure H-9 Output File Qualifiers Used in Copy Operations 


Input File-Selection 


Qualifiers /BY_OWNER /NEW_VERSION /OVERLAY /REPLACE 
/BACKUP y Y Y Y 

_ [BEFORE y Y Y Y 
/BY_OWNER Y Y Y Y 
/CONFIRM Y 4 Y Y 
/CREATED Y Y Y Y 
/EXCLUDE Y: Y Y Y 
/EXPIRED Y Y Y Y 
/MODIFIED Y Y Y 7 
/SINCE Y Y Y Y 
Output File 
Qualifiers 
/BY_OWNER = Y Y Y 
/NEW_VERSION Y ~ N N 
/OVERLAY Y N a N 
/REPLACE ¥ N N = 
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Valid Combinations of BACKUP Qualifiers 


Figure H-10 Command Qualifiers Used in Compare Operations 


[ANOJASSIST 
/BRIEF 
/COMPARE 
/FAST 
/FULL 












/PHYSICAL 


Command VOLUME 
Qualifiers 
/[NOJASSIST | BN YON NY NS OE YX 
/BRIEF@ Y-YYNYYYYY 
/COMPARE VY YH XY ONY XO OY 
/FAST YOON Yo NON ON ONS HF 
/FULL? YNYY-YYYY/Y 
AMAGE YON NO NENG oe OY NaN AY 
/LIST YYYY/Y Yay Y 
/[NO]LOG ON YN ON ONE Ss A OF 
/PHYSICAL YOY OY Ye INE ON Ye oF 
/NOLUME 4 YYYYYYYYN- 
Input 
File—Selection 
Qualifiers 
/BY_OWNER YYYYY NY Y NN 
/BEFORE YYYYYNY Y NN 
/EXCLUDE YYYYY NY Y NN 
/SINCE YYYYYN Y Y NN 
1 Use only when comparing magnetic tape save sets. 
2 You must specify the /LIST qualifier with this qualifier. 
3 When you specify /LIST with /LOG, direct the output from the 
list operation to a file. 
4 You must specify /IMAGE with this qualifier. 

ZK~6533-GE 


H-10 


Valid Combinations of BACKUP Qualifiers 


Figure H-11 Input File-Selection Qualifiers Used in Compare Operations 


Input File—Selection 


Qualifiers /BY_OWNER__ /BEFORE /EXCLUDE |. /SINCE 
/BY_OWNER = Y ¥' ¥ 
/BEFORE y: = Y N 
/EXCLUDE Y Y = ¥ 
/SINCE Y N ¥ = 

Input Save—Set 

Qualifiers 

/[NOJREWIND! Y Y Y Y 
/SAVE_SET2 Y Y Y Y 
/SELECT Y Y Y Y 


1 Use only when comparing magnetic tape save sets. 
2 Required when comparing save sets on disk. 
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Figure H-12 Input Save-Set Qualifiers Used in Compare Operations 


Input File—Selection 


Qualifiers /[NOJREWIND /SAVE_SET /SELECT 
/BY_OWNER Y Y Y 
/BEFORE Y Y Y 
/EXCLUDE Y Y Y 
/SINCE Y Y ¥: 

Input Save-Set 

Qualifiers 

/[NOJREWIND! - Y ¥ 
/SAVE_SET2 Y 7 Y 
/SELECT Y Y = 


1 Use only when comparing magnetic tape save sets. 
2 Required when comparing save sets on disk. 
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Access control 
required by ACL editor, Sys Mgmt Util: A-L, 
1-4 
with Identifier ACE, Sys Mgmt Util: A-L, 1-138 
with protection codes, Sys Mgmt Util: A-L, 
1-13 
Access control entries 
See ACEs 
Access control list editor 
See ACL editor 
Access control lists 
See ACLs 
/ACCESSED qualifier 
in Mount utility, Sys Mgmt Util: M-Z, 2-8 
Accounting 
enabling image-level accounting, Sys Mgmt 
Util: A-L, 10-5, 10-8, 10-18 
ACCOUNTING command, Sys Mgmt Util: A-L, 
2-4 
Accounting files 
copying records between, Sys Mgmt Util: A-L, 
2-8, 2-19 
processing to produce reports, Sys Mgmt Util: 
A-L, 2—9, 2-11, 2-25 
record format of, Sys Mgmt Util: A-L, C-1 
types of record in, Sys Mgmt Util: A-L, 2-29 
Accounting reports 
brief reports, Sys Mgmt Util: A-L, 2-9 
full reports, Sys Mgmt Util: A-L, 2-11 
summary reports, Sys Mgmt Util: A-L, 2-25 
Accounting utility, Sys Mgmt Util: A-L, 2-4 
ACKs (access control entries), Sys Mgmt Util: 
A-L, 1-8, 1-6 
application-specific, Sys Mgmt Util: A-L, 1-6 
Creator ACEs, Sys Mgmt Util: A-L, 1-10 
Default Protection ACEs, Sys Mgmt Util: A-L, 
1-11 
Identifier ACEs, Sys Mgmt Util: A-L, 1-138 
ordering entries in an ACL, Sys Mgmt Util: 
A-L, 1-3 
security alarm, Sys Mgmt Util: A-L, 1-6 
security audit, Sys Mgmt Util: A-L, 1-8 
Subsystem ACEs, Sys Mgmt Util: A-L, 1-16 


index 


ACL editor, Sys Mgmt Util: A-L, 1-3, 14 
/CLASS qualifier, Sys Mgmt Util: A-L, 1-18 
control access to objects, Sys Mgmt Util: A-L, 
1-4 

customizing, Sys Mgmt Util: A-—L, B—1 

DCL qualifiers, Sys Mgmt Util: A-L, 1-18 to 
1-21 

exiting from, Sys Mgmt Util: A-L, 1-5 

file format required, Sys Mgmt Util: A-L, 1-4 

/JOURNAL qualifier, Sys Mgmt Util: A-L, 
1-19 

keypad editing, Sys Mgmt Util: A-L, A-1 

/MODE qualifier, Sys Mgmt Util: A-L, 1-20 

object ownership, Sys Mgmt Util: A-L, 1-4 

/OBJECT_TYPE qualifier, Sys Mgmt Util: 
A-L, 1-5, 1-20 

privileges required, Sys Mgmt Util: A-L, 1-4 

prompting by, Sys Mgmt Util: A-L, A-1 

qualifiers (table), Sys Mgmt Util: A-L, 1-18 

/RECOVER qualifier, Sys Mgmt Util: A-L, 
1-21 

specifying file type, Sys Mgmé Util: A—L, 1-4 

specifying object class, Sys Mgmt Util: A-L, 
1-5, 1-18 

wildcard restriction, Sys Mgmt Util: A-L, 14 

ACLs (access control lists) 

impact of length on performance, Sys Mgmt 
Util: A-L, 1-3 

list of supported object classes, Sys Mgmt Util: 
A-L, 1-3 

rules for ordering entries, Sys Mgmt Util: A-L, 
1-3 

ACL section files, Sys Mgmt Util: A-L, B-1 

ACP (ancillary control process) 
volume mount, Sys Mgmt Util: M-Z, 2-29 

ACP system parameters 
ACP_BASEPRIO, Sys Mgmt Util: M-Z, C-6 
ACP_DATACHECK, Sys Mgmt Util: M-Z, C-6 
ACP_DINDXCACHE, Sys Mgmt Util: M-Z, 

C-6 
ACP_DIRCACHE, Sys Mgmt Util: M-Z, C-6 
ACP_EXTCACHE, Sys Mgmt Util: M-Z, C-6 
ACP_EXTLIMIT, Sys Mgmt Util: M-Z, C-7 
ACP_FIDCACHE, Sys Mgmt Util: M-Z, C-7 
ACP_HDRCACHE, Sys Mgmt Util: M-Z, C-—7 
ACP_MAPCACHE, Sys Mgmt Util: M-Z, C-—7 
ACP_MAXREAD, Sys Mgmt Util: M-Z, C-7 
ACP_MULTIPLE, Sys Mgmt Util: M-Z, C-7 


Inday.-1 


ACP system parameters (cont'd) 
ACP_QUOCACHE, Sys Mgmt Util: M-Z, C-7 
ACP_REBLDSYSD, Sys Mgmt Util: M-Z, C-7 
ACP_SHARE, Sys Mgmt Util: M-Z, C-8 
ACP_SWAPFLGS, Sys Mgmt Util: M-Z, C-8 
ACP_SYSACC, Sys Mgmt Util: M-Z, C-8 
ACP_WINDOW, Sys Mgmt Util: M-Z, C-8 
ACP_WORKSET, Sys Mgmt Util: M-Z, C-8 
ACP_WRITEBACK, Sys Mgmt Util: M-Z, C-9 
ACP_XQP_RES, Sys Mgmt Util: M-Z, C-9 

Actual node name, Sys Mgmt Util: A-L, 11-49 

Actual port name, Sys Mgmt Util: A-L, 11-49 

Actual service name, Sys Mgmt Util: A-L, 11-49 


Adapters 


See Bus adapters 
ADD (Field) command 
CIRCUITS class, Sys Mgmt Util: M-Z, 3-20 
CLUSTER class, Sys Mgmt Util: M-Z, 3-21 
CONNECTIONS class, Sys Mgmt Util: M-Z, 
3-22 
COUNTERS class, Sys Mgmt Util: M-Z, 3-23 
CREDITS class, Sys Mgmt Util: M-Z, 3-24 
ERRORS class, Sys Mgmt Util: M-Z, 3-24 
in Show Cluster utility, Sys Mgmt Util: M-Z, 
3-20 
LOCAL_PORTS class, Sys Mgmt Util: M-Z, 
3-24 
MEMBERS class, Sys Mgmt Util: M-Z, 3-26 
SYSTEMS class, Sys Mgmt Util: M-Z, 3-28 
ADD CIRCUITS command 
in Show Cluster utility, Sys Mgmt Util: M-Z, 
3-12 
ADD CLUSTER command 
in Show Cluster utility, Sys Mgmt Util: M-Z, 
3-14 
ADD command 
in Authorize utility, Sys Mgmt Util: A-L, 5-6 
in Install utility, Sys Mgmt Util: A-—L, 10-5 
ADD CONNECTIONS command 
in Show Cluster utility, Sys Mgmt Util: M-Z, 
3-15 
ADD COUNTERS command 
in Show Cluster utility, Sys Mgmt Util: M-Z, 
3-16 
ADD CREDITS command 
in Show Cluster utility, Sys Mgmt Util: M-Z, 
3-18 
ADD ERRORS command 
in Show Cluster utility, Sys Mgmt Util: M-Z, 
3-19 
ADD/AIDENTIFIER command 
in Authorize utility, Sys Mgmt Util: A-L, 5-19 
ADD LOCAL_PORTS command 
in Show Cluster utility, Sys Mgmt Util: M-Z, 
3-29 
ADD MEMBERS command 
in Show Cluster utility, Sys Mgmt Util: M-Z, 
3-31 
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ADD/PROXY command 
in Authorize utility, Sys Mgmt Util: A-L, 5-21 
ADD SYSTEMS command 
in Show Cluster utility, Sys Mgmt Util: M-Z, 
3-32 
AFFINITY_SKIP system parameter, Sys Mgmt 
Util: M-Z, C-48 
AFFINITY_TIME system parameter, Sys Mgmt 
Util: M-Z, C-48 
AGEN$FEEDBACK.DAT file, Sys Mgmt Util: 
A-L, 6-5, 6-6 
AGEN$FEEDBACK.EXE file, Sys Mgmt Util: 
A-L, 6-5 
AGEN$PARAMS.REPORT file, Sys Mgmt Util: 
A-L, 6-7 
Alarm ACEs, Sys Mgmt Util: A-L, 1-6 
keywords, Sys Mgmt Util: A-L, 1-8 
specifying access, Sys Mgmt Util: A-L, 1-8 
Alarm messages 
See Security alarm messages 


ALF 
See automatic login facility 
ALF ADD command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-10 
ALF REMOVE command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-11 
ALF SHOW command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-12 
ALLOCLASS system parameter, Sys Mgmt Util: 
M-Z, C-9 
ALPHAVMSSYS.OLD file, Sys Mgmt Util: A-L, 
6—7 
ALPHAVMSSYS.PAR file, Sys Mgmt Util: A-L, 
6-7 
ANALYZE/AUDIT command 
See also Audit Analysis utility 
/BEFORE qualifier, Sys Mgmt Util: A-L, 4-5 
/BINARY qualifier, Sys Mgmt Util: A—L, 4-6 
/BRIEF qualifier, Sys Mgmt Util: A-L, 4-7 
/EVENT_TYPE qualifier, Sys Mgmt Util: A-L, 
4—7, 4-8 
/FULL qualifier, Sys Mgmt Util: A-L, 4—10 
/IGNORE qualifier, Sys Mgmt Util: A-L, 4—10 
JAINTERACTIVE qualifier, Sys Mgmt Util: A-L, 
4-11 
/OUTPUT qualifier, Sys Mgmt Util: A-L, 4-4, 
4-12 
/PAUSE qualifier, Sys Mgmt Util: A-L, 4-12 
/SELECT qualifier, Sys Mgmt Util: A-L, 4-18, 
4-17 
/SINCE qualifier, Sys Mgmt Util: A-L, 4-26 
/SUMMARY qualifier, Sys Mgmt Util: A-L, 
4-26 
ANALYZE/DISK_STRUCTURE stages, Sys Mgmt 
Util: A~L, D-1 


Analyze/Disk_Structure utility (ANALYZE/DISK_ 
STRUCTURE) 
directing output, Sys Mgmt Util: A-L, 3-5, 3-6 
file recovery, Sys Mgmt Util: A-L, 3-4 
invoking, Sys Mgmt Util: A-L, 3-6 
parameter, Sys Mgmt Util: A-L, 3-6 
qualifiers, Sys Mgmt Util: A-L, 3-7 to 3-11 
/INO]JCONFIRM, Sys Mgmt Util: A-L, 3-7 
/AINOJLIST, Sys Mgmt Util: A-L, 3-8 
ANOJOUTPUT, Sys Mgmt Util: A-L, 3-8 
/INOJREAD_CHECK, Sys Mgmt Util: A-L, 
3-9 
/[NOJREPAIR, Sys Mgmt Util: A-L, 3-10 
/RECORD_ATTRIBUTES, Sys Mgmt Util: 
A-L, 3-9 
/USAGE, Sys Mgmt Util: A-L, 3-10 
repairing disk errors, Sys Mgmt Util: A-L, 
3-3, 3-10 
reporting disk errors, Sys Mgmt Util: A-L, 3-3 
requirements and limitations, Sys Mgmt Util: 
A-L, 3-6 
ANALYZE/ERROR_LOG DCL command, Sys 
Mgmt Util: A-L, 9-4 
Application port, Sys Mgmt Util: A-L, 11-9, 
11-31, 11-32 
displaying, Sys Mgmt Util: A-L, 11-47 
mapping, Sys Mgmt. Util: A-L, 11-33 
Application service, Sys Mgmt Util: A-L, 11-9, 
11-12, 11-31, 11-34 
defined, Sys Mgmt Util: A-L, 11-18 
setting up, Sys Mgmt Util: A-L, 11-31 
Arrow keys 
definition for, Sys Mgmt Util: M-Z, 3-54 
functions of, Sys Mgmt Util: M-Z, B-3 
/ASSIST qualifier 
in Backup utility, Sys Mgmt Util: A-L, 7-14 
in Mount utility, Sys Mgmt Util: M-Z, 2-8 
Asterisk (*) 
wildcard character, Sys Mgmt Util: A-L, 7-8 
Asynchronous device 
LAT application ports for, Sys Mgmt Util: A-L, 
11-9, 11-31 . 
ATTACH command 
in LATCP, Sys Mgmt Util: A-L, 11-5 
in SYSMAN, Sys Mgmt Util: M-Z, 5-13 
Attributes 
Dynamic, Sys Mgmt Util: A-L, 5-19, 5-27, 


5-35 

Holder Hidden, Sys Mgmt Util: A-L, 5-19, 
5-27, 5-35 

Name Hidden, Sys Mgmt Util: A-L, 5-19, 
5-27, 5-35 

No Access, Sys Mgmt Util: A-L, 5-19, 5-27, 
5-35 

Resource, Sys Mgmt Util: A-L, 5-19, 5-28, 
5-35 

specifying identifier characteristics, Sys Mgmt 
Util: A-L, 1-17 


Attributes (cont’d) 
Subsystem, Sys Mgmt Util: A-L, 5-19, 5-28, 
5-36 
Audit ACEs, Sys Mgmt Util: A-L, 1-8 
specifying access, Sys Mgmt Util: A—L, 1-9 
specifying attributes, Sys Mgmt Util: A-L, 1-8 
Audit Analysis utility (ANALYZE/AUDIT), Sys 
Mgmt Util: A-L, 4-3 
CONTINUE command, Sys Mgmt Util: A-L, 
4-29 
default input file, Sys Mgmt Util: A-L, 4-4 
directing output, Sys Mgmt Util: A—L, 44 
DISPLAY command, Sys Mgmt Util: A-L, 4—29 
displaying current selection criteria, Sys Mgmt 
Util: A-L, 4-34 
EXIT command, Sys Mgmt Util: A-L, 4-31 
exiting from, Sys Mgmt Util: A-L, 44, 4-31 
HELP command, Sys Mgmt Util: A-L, 4-31 
interactive commands, Sys Mgmt Util: A-L, 
4-11, 4-29 
invoking, Sys Mgmt Util: A-L, 4-4 
LIST command, Sys Mgmt Util: A-L, 4-32 
NEXT FILE command, Sys Mgmt Util: A-L, 
4-32 
NEXT RECORD command, Sys Mgmt Util: 
A-L, 4-33 
POSITION command, Sys Mgmt Util: A-L, 
4—33 
qualifiers, Sys Mgmt Util: A-L, 4-5 
SECAUDIT.COM command procedure, Sys 
Mgmt Util: A-L, 4-3 
selecting by access type, Sys Mgmt Util: A-L, 
4-13, 4-17 
selecting by account name, Sys Mgmt Util: 
A-L, 4-13, 4-18 
selecting by device name, Sys Mgmt Util: A-L, 
4-18 
selecting by facility, Sys Mgmt Util: A-L, 4-18 
selecting by identifier, Sys Mgmt Util: A-L, 
4-14, 4-19 
selecting by identifier holder, Sys Mgmt Util: 
A-L, 4-14, 4-19 
selecting by image name, Sys Mgmt Util: A-L, 
4-14, 4-19 
selecting by installation event, Sys Mgmt Util: 
A-L, 4-20 
selecting by local proxy account, Sys Mgmt 
Util: A-L, 4—14, 4-20 
selecting by network attribute, Sys Mgmt Util: 
A-L, 4-16, 4-23 
selecting by object, Sys Mgmt Util: A-L, 4-21, 
4-22 
selecting by parent process, Sys Mgmt Util: 
A-L, 4-15, 4-22 
selecting by privilege, Sys Mgmt Util: A-L, 
4-15, 4-22 
selecting by process, Sys Mgmt Util: A-L, 
4—16, 4-23 
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Audit Analysis utility (ANALYZE/AUDIT) (cont'd) 


selecting by status characteristic, Sys Mgmt 
Util: A-L, 4-16 
selecting by success status, Sys Mgmt Util: 
A-L, 4-23 
selecting by system characteristic, Sys Mgmt 
Util: A-L, 4—16, 4—24 
selecting by terminal name, Sys Mgmt Util: 
A-L, 4-16, 4-24 
selecting by user name, Sys Mgmt Util: A-L, 
4-16, 4-24 
selecting by volume, Sys Mgmt Util: A-L, 
4-13, 4-14, 4-15, 4-16, 4-18, 4-20, 4-21, 
4—25 
SHOW command, Sys Mgmt Util: A-L, 4-34 
Audit data packets 
See Security audit data packets 
Audit event flags 
See Security audit event flags 
Audit header packets 
See Security audit header packets 
Audit log files 
See Security audit log files 
Audit messages 
See Security audit event messages 
Audit reports 
See Security audit reports 
Authorize utility (AUTHORIZE) 
ADD command, Sys Mgmt Util: A-L, 5-6 
ADD/IDENTIFIER command, Sys Mgmt Util: 
A-L, 5-19 
ADD/PROXY command, Sys Mgmt Util: A-L, 
5-21 
commands summary (table), Sys Mgmt Util: 
A-L, 5-6 
controlling access with identifiers, Sys Mgmt 
Util: A-L, 1-13 
COPY command, Sys Mgmt Util: A-L, 5-22 
CREATE/PROXY command, Sys Mgmt Util: 
A-L, 5-24 
CREATE/RIGHTS command, Sys Mgmt Util: 
A-L, 5-25 
DEFAULT command, Sys Mgmt Util: A-L, 
5-25 
default password, Sys Mgmt Util: A-L, 5-7 
DEFAULT record, Sys Mgmt Util: A-L, 5-7 
EXIT command, Sys Mgmt Util: A-L, 5-26 
exiting from, Sys Mgmt Util: A-L, 5-4 
GRANT/IDENTIFIER command, Sys Mgmt 
Util: A-L, 5-27 
HELP command, Sys Mgmt Util: A-L, 5-28 
invoking, Sys Mgmt Util: A-L, 5-4 
LIST command, Sys Mgmt Util: A—L, 5-30 
LIST/IDENTIFIER command, Sys Mgmt Util: 
A-L, 5-31 
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Authorize utility (AUTHORIZE) (cont’d) 
LIST/PROXY command, Sys Mgmt Util: A-L, 
5-33 
LIST/RIGHTS command, Sys Mgmt Util: A-L, 
5-33 
login flags, Sys Mgmt Util: A-L, 5-10 
MODIFY command, Sys Mgmt Util: A-L, 5-34 
MODIFY/IDENTIFIER command, Sys Mgmt 
Util: A-L, 5-85 
MODIFY/PROXY command, Sys Mgmt Util: 
A-L, 5-37 
MODIFY/SYSTEM_PASSWORD command, Sys 
Mgmt Util: A-L, 5-38 
privileges required, Sys Mgmt Util: A-L, 5-3 
REMOVE command, Sys Mgmt Util: A-L, 
5-39 
REMOVE/ADENTIFIER command, Sys Mgmt 
Util: A-L, 5-40 
REMOVE/PROXY command, Sys Mgmt Util: 
A-L, 5-40 
RENAME command, Sys Mgmt Util: A-L, 
5-41 
RENAME/IDENTIFIER command, Sys Mgmt 
Util: A-L, 5-43 
restrictions, Sys Mgmt Util: A-L, 5-38 
REVOKE/AIDENTIFIER command, Sys Mgmt 
Util: A-L, 5-43 
SHOW command, Sys Mgmt Util: A-L, 5-44 
SHOW/IDENTIFIER command, Sys Mgmt 
Util: A-L, 5-47 
SHOW/PROXY command, Sys Mgmt Util: A-L, 
5-49 
Autoconfiguration 
VAXstation 2000 (table) 
table, Sys Mgmt Util: M-Z, D-7 
VAXstation 2000 and MicroVAX 2000 devices, 
Sys Mgmt Util: M-Z, D-6 
AUTOCONFIGURE command 
in SYSGEN, Sys Mgmt Util: M-Z, 4-5 
Autoconfiguring devices 
on AXP systems, Sys Mgmt Util: M-~Z, 5-33 
AUTOGEN.PAR, Sys Mgmt Util: A-L, 6-5, 6-7 
AUTOGEN command procedure, Sys Mgmt Util: 
A-L, 6-3 
calculation of parameter values, Sys Mgmt 
Util: A-L, 6-6 
collection of data, Sys Mgmt Util: A-L, 6-6 
display of page, swap and dump file size 
calculations, Sys Mgmt Util: A—L, 6-7 
end phase 
default, Sys Mgmt Util: A-L, 6-10 
specifying when invoking, Sys Mgmt Util: 
A-L, 6-10 
examining calculations of, Sys Mgmt Util: A-L, 
6-3 
execution mode 
specifying when invoking, Sys Mgmt Util: 
A-L, 6-10 


AUTOGEN command procedure (cont'd) 
feedback, Sys Mgmt Util: A-L, 6-3, 6-4 
collection of, Sys Mgmt Util: A-L, 6-5 
data file, Sys Mgmt Util: A-L, 6-5 
parameters affected by, Sys Mgmt Util: 
A-L, 6-5 
files used by, Sys Mgmt Util: A-L, 6-9 
generation of known image file list 
(VMSIMAGES.DAT), Sys Mgmt Util: A-L, 
6-6 
GENFILES phase, Sys Mgmt Util: A-—L, 6-7 
GENPARAMS phase, Sys Mgmt Util: A-L, 6-6 
GETDATA phase, Sys Mgmt Util: A-L, 6-6 
HELP phase, Sys Mgmt Util: A-L, 6-8 
input files, Sys Mgmt Util: A-L, 6-9 
invoking, Sys Mgmt Util: A—L, 6-10 
operations performed by, Sys Mgmt Util: A-L, 
6-5 
output files, Sys Mgmt Util: A-L, 6-9 
parameters to, Sys Mgmt Util: A-L, 6-10 
phases, Sys Mgmt Util: A-L, 6-5 
specifying when invoking, Sys Mgmt Util: 
A-L, 6-10 
REBOOT phase, Sys Mgmt Util: A-L, 6-8 
restriction with changing system files sizes, 
Sys Mgmt Util: A-L, 6-7 
SAVPARAMS phase, Sys Mgmt Util: A-L, 6-6 
SETPARAMS phase, Sys Mgmt Util: A-L, 6-7 
SHUTDOWN phase, Sys Mgmt Util: A-L, 6-7 
start phase 
‘ default, Sys Mgmt Util: A-L, 6-10 
specifying when invoking, Sys Mgmt Util: 
A-L, 6-10 
system parameters affected by, Sys Mgmt Util: 
A-L, 6-4 
system parameters affected by feedback, Sys 
Mgmt Util: A-L, 6-5 
TESTFILES phase, Sys Mgmt Util: A-L, 6-7 
when torun, Sys Mgmt Util: A-L, 6-8 
Automatic login facility (ALF) 
adding records, Sys Mgmt Util: M-Z, 5-10 
displaying records, Sys Mgmt Util: M-Z, 5-12 
removing records, Sys Mgmt Util: M-Z, 5-11 
/AUTOMATIC qualifier 
in Mount utility, Sys Mgmt Util: M-Z, 2-9 
AWSMIN system parameter, Sys Mgmt Util: 
M-Z, C-9 
AWSTIME system parameter, Sys Mgmt Util: 
M-Z, C-9 


Backlinks 
definition, Sys Mgmt Util: A-L, 3-3 
Backup 
compare operation, Sys Mgmt Util: A-L, 7-22 
image: 
See Image backup 


Backup (cont'd) 
improving the speed of, Sys Mgmt Util: A-L, 
7-31 
incremental 
See Incremental backup 
list operation, Sys Mgmt Util: A-L, 7-18, 7-32, 
7-44 
selective, Sys Mgmt Util: A-L, 7-15, 7-16, 
7-27, 7-29, 7-30, 7-46, 7-48 
standalone 
See Standalone BACKUP 
BACKUP command 
See also Backup utility 
element lists, Sys Mgmt Util: A-L, 7-6 
format, Sys Mgmt Util: A-L, 7-4 
input specifier, Sys Mgmt Util: A-L, 7-4 
output specifier, Sys Mgmt Util: A-L, 7-4 
specifying input, Sys Mgmt Util: A-L, 7-5 
specifying output, Sys Mgmt Util: A-L, 7-5 
specifying wildcard characters, Sys Mgmt Util: 
A-L, 7-8 | 
types of qualifiers, Sys Mgmt Util: A-L, 7-7 
using with save sets, Sys Mgmt Util: A—L, 7-5 
/BACKUP qualifier 
in Backup utility, Sys Mgmt Util: A-L, 7-15 
Backup utility (BACKUP) 
See also BACKUP command 
command line qualifiers, Sys Mgmt Util: A-L, 
7-7 
command line syntax, Sys Mgmt Util: A-L, 
7-4 
directing output from, Sys Mgmt Util: A-L, 
7-10 
exiting from, Sys Mgmt Util: A—L, 7-11 
invoking, Sys Mgmt Util: A-L, 7-10 
using to compare files, Sys Mgmt Util: A-L, 
7-22 
BALSETCNT system parameter, Sys Mgmt Util: 
M-Z, C-9 
Batch execution 
on remote nodes, Sys Mgmt Util: M-Z, 5-6 
/BEFORE qualifier 
in Backup utility, Sys Mgmt Util: A-L, 7-16 
/BEGINNING qualifier, Sys Mgmt Util: M-Z, 3-6 
in Monitor utility, Sys Mgmt Util: M-Z, 1-9 
Binary output from Audit Analysis utility, Sys 
Mgmt Util: A-L, 4-6 
/BIND qualifier . 
in Mount utility, Sys Mgmt Util: M-Z, 2-10 
BJOBLIM system parameter, Sys Mgmt Util: 
M-Z, C-9 
Block cache allocation, Sys Mgmt Util: M-Z, 2-29 
/BLOCKSIZE qualifier 
in Mount utility, Sys Mgmt Util: M-Z, 2-11 
/BLOCK_SIZE qualifier 
in Backup utility, Sys Mgmt Util: A-L, 7-17 
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BOOT_STYLE system parameter, Sys Mgmt Util: 
M-Z, C-10 
BORROWLIM system parameter, Sys Mgmt Util: 
M-Z, C-10 
BREAKPOINTS system parameter, Sys Mgmt 
Util: M-Z, C-48 
Brief format listings, Sys Mgmt Util: A-L, 4-7 
/BRIEF qualifier 
in Backup utility, Sys Mgmt Util: A-L, 7-18 
/BUFFER_COUNT qualifier 
in Backup utility, Sys Mgmt Util: A-L, 7-19 
BUGCHECKFATAL system parameter, Sys Mgmt 
Util: M-Z, C-10 . 
BUGREBOOT system parameter, Sys Mgmt Util: 
M-Z, C-10 
Bus adapters 
generic names, Sys Mgmt Util: M-Z, 4-25 
listing, Sys Mgmt Util: M-Z, 4-25 . 
nexus numbers, Sys Mgmt Util: M-Z, 4—25 
specifying, Sys Mgmt Util: M-Z, 4-5, 4~9 
Buses 
display on AXP systems, Sys Mgmt Util: M-Z, 
5-38 
/BY_NODE qualifier 
in Monitor utility, Sys Mgmt Util: M-Z, 1-9 
/BY_OWNER qualifier 
as Backup utility input file qualifier, Sys Mgmt 
Util: A-L, 7-19 
as Backup utility output file qualifier, Sys 
Mgmt Util: A—L, 7-20 
as Backup utility output save-set qualifier, Sys 
Mgmt Util: A-L, 7-21 


C 


/CACHE qualifier 
in Mount utility, Sys Mgmt Util: M-Z, 2-12 
Changing page, swap, and dump file sizes, Sys 
Mgmt Util: A-L, 6-3 
Changing system parameters 
recommended method, Sys Mgmt Util: A-L, 
6-3 
CHANNELCNT system parameter, Sys Mgmt 
Util: M-Z, C-48 
CHECK_CLUSTER system parameter, Sys Mgmt 
Util: M-Z, C10 
CHECK_FEEDBACK mode, Sys Mgmt Util: A-L, 
6-8 
CIRCUITS class 
adding, Sys Mgmt Util: M-Z, 3-138 
fields belonging to, Sys Mgmt Util: M-Z, 3-20 
removing, Sys Mgmt Util: M-Z, 3-41 
Circuit timer, Sys Mgmt Util: A-L, 11-22 
Classes 
SHOW CLUSTER, Sys Mgmt Util: M-Z, 3-3 
Class-name qualifier 
in Monitor utility 
/ALL, Sys Mgmt Util: M-Z, 1-14 
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Class-name qualifier 
in Monitor utility (cont'd) 
/AVERAGE, Sys Mgmt Util: M-Z, 1-14 
/CPU, Sys Mgmt Util: M-Z, 1-34 
/CURRENT, Sys Mgmt Util: M-Z, 1-14 
ITEM, Sys Mgmt Util: M-Z, 1-20, 1-48 
/MAXIMUM, Sys Mgmt Util: M-Z, 1-14 
/MINIMUM, Sys Mgmt Util: M-Z, 1-14 
/PERCENT, Sys Mgmt Util: M-Z, 1-21 
/TOPBIO, Sys Mgmt Util: M-Z, 1-40 
/TOPCPU, Sys Mgmt Util: M-Z, 1-40 
/TOPDIO, Sys Mgmt Util: M-Z, 1-41 
/TOPFAULT, Sys Mgmt Util: M-Z, 1-41 
/TOPRBS, Sys Mgmt Util: M-Z, 1-41 
CLASS_PROT system parameter, Sys Mgmt Util: 
M-Z, C-10 
CLISYMTBL system parameter, Sys Mgmt Util: 
M-Z, C~-10 
CLUE 
See Crash Log Utility Extractor 
CLUSTER class 
adding, Sys Mgmt Util: M-Z, 3-14 
fields belonging to, Sys Mgmt Util: M-Z, 3-21 
removing, Sys Mgmt Util: M-Z, 3-42 
CLUSTER class record 
in Monitor utility, Sys Mgmt Util: M-Z, A-11 
CLUSTER information 
SHOW CLUSTER class of data, Sys Mgmt 
Util: M-Z, 3-3 
Cluster performance statistics 
in Monitor utility, Sys Mgmt Util: M-Z, 1-15 
/CLUSTER qualifier 
in Mount utility, Sys Mgmt Util: M-Z, 2-14 
CLUSTER_AUTHORIZE.DAT file, Sys Mgmt Util: 
M-Z, 5-15, 5-17 
CLUSTER_CONFIG.COM command procedure, 
Sys Mgmt Util: M-Z, 5-15 
Command interpreter 
symbol table, Sys Mgmt Util: M-Z, C—10 
Command mode for Audit Analysis utility 
manipulating the display interactively, Sys 
Mgmi Util: A-L, 4-11, 4-29 
Command procedure 
building, Sys Mgmt Util: M-Z, 3-49 
control for SHOW CLUSTER output, Sys 
Mgmt Util: M-Z, 3-4 
correcting system time, Sys Mgmt Util: M-Z, 
5-16 
executing, Sys Mgmt Util: M-Z, 3-12 
executing at system startup, Sys Mgmt Util: 
M-Z, 5-64 
executing DCL commands with DO, Sys Mgmt 
Util: M-Z, 5-29 
Command procedures 
executing 
in SYSMAN, Sys Mgmt Util: M-Z, 5-9 


Commands 
for SYSGEN, Sys Mgmt Util: M-Z, 4-5 
recalling, Sys Mgmt Util: A-L, 11-19 
Command summary 
of Authorize utility commands, Sys Mgmt Util: 
A-L, 5-5 
Command syntax, Sys Mgmt Util: A-L, 7-4 
/COMMENT qualifier 
in Backup utility, Sys Mgmt Util: A-L, 7-21 
in Monitor utility, Sys Mgmt Util: M-Z, 1-10 
in Mount utility, Sys Mgmt Util: M-Z, 2-15 
Compaction of data 


See Data record compaction 
Compare operations, Sys Mgmt Util: A-—L, 7-22 
/COMPARE qualifier 
in Backup utility, Sys Mgmt Util: A-L, 7-22 
CONCEAL_DEVICES system parameter, Sys 
Mgmt Util: M-Z, C-48 
CONFIGURATION SET CLUSTER_ 
AUTHORIZATION command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-14 
CONFIGURATION SET TIME command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-15 
CONFIGURATION SHOW CLUSTER_ 
AUTHORIZATION command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-16 
CONFIGURATION SHOW TIME command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-17 
CONFIGURE command 
in SYSGEN, Sys Mgmt Util: M-Z, 4-7 
‘Configuring a printer, Sys Mgmt Util: A-L, 11-9 
/CONFIRM qualifier 
in Analyze/Disk_Structure utility, Sys Mgmt 
Util: A-L, 3-7 
in Backup utility, Sys Mgmt Util: A-L, 7-23 
in Mount utility, Sys Mgmt Util: M-Z, 2-16 
CONNECT/ADAPTER command 
in SYSGEN, Sys Mgmt Util: M-Z, 4-9 
Connecting devices, Sys Mgmt Util: M-Z, 4-5, 
4-9, 4-11 
on AXP systems, Sys Mgmt Util: M-Z, 5-34 
Connections 
in LAT environment, Sys Mgmt Util: A-L, 
11-27, 11-49 
specifying type with LATCP, Sys Mgmt Util: 
— A-L, 11-22 
CONNECTIONS class 
adding or restoring, Sys Mgmt Util: M-Z, 3-15 
fields belonging to, Sys Mgmt Util: M-Z, 3-22 
removing, Sys Mgmt Util: M-Z, 3-43 
CONNECT/NOADAPTER command 
in SYSGEN, Sys Mgmt Util: M-Z, 4-11 
CONTINUE command 
in Audit Analysis utility, Sys Mgmt Util: A-L, 
4-29 


/CONTINUOUS qualifier, Sys Mgmt Util: M-Z, 
3-7 
CONVERT command 
in Monitor utility, Sys Mgmt Util: M-Z, 1-5 
CONVERT LOG command 
in LMCP, Sys Mgmt Util: A-L, 12-5 
COPY command 
in Authorize utility, Sys Mgmt Util: A-L, 5-22 
/COPY qualifier 
in Mount utility, Sys Mgmt Util: M-Z, 2-17 
Counters, Sys Mgmt Util: A-L, 11-3 
displaying 
for links, Sys Mgmt Util: A-L, 11-36 
for nodes, Sys Mgmt Util: A-L, 11-41 
for services, Sys Mgmt Util: A-L, 11-50 
resetting, Sys Mgmt Util: A-L, 11-52 
COUNTERS class 
adding, Sys Mgmt Util: M-Z, 3-16 
fields belonging to, Sys Mgmt Util: M-Z, 3-23 
removing, Sys Mgmt Util: M-Z, 3-44 
CPU power 
in LAT environment, Sys Mgmt Util: A-L, 
11-23 
Crash Log Utility Extractor (CLUE) 
commands, Sys Mgmt Util: A-L, 8-5 
DELETE command in, Sys Mgmt Util: A-L, 
8-5 
DIRECTORY command in, Sys Mgmt Util: 
A-L, 8-6 
EXIT command in, Sys Mgmt Util: A-L, 8-7 
exiting from, Sys Mgmt Util: A-L, 8-4 
EXTRACT command in, Sys Mgmt Util: A-L, 
8-7 
HELP command in, Sys Mgmt Util: A-L, 8-8 
invoking, Sys Mgmt Util: A-L, 8-4 
SHOW command in, Sys Mgmt Util: A-L, 8-8 
/CRC qualifier 
as Backup utility input save-set qualifier, Sys 
Mgmt Util: A-L, T-24 
as Backup utility output save-set qualifier, Sys 
Mgmt Util: A-L, 7-25 
CRDENABLE system parameter, Sys Mgmt Util: 
M-Z, C-11 
CRD_CONTROL system parameter, Sys Mgmt 
Util: M-Z, C-11 
CREATE command 
in Install utility, Sys Mgmt Util: A-L, 10-8 
in SYSGEN, Sys Mgmt Util: M-Z, 4-12 
/CREATED qualifier 
in Backup utility, Sys Mgmt Util: A-L, 7-25 
CREATE LINK command 
in LATCP, Sys Mgmt Util: A-L, 11-7 
CREATE LOG command 
in LMCP, Sys Mgmt Util: A-L, 12-7 
CREATE PORT command 
in LATCP, Sys Mgmt Util: A-L, 11-8 
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CREATE/PROXY command 
in Authorize utility, Sys Mgmt Util: A-L, 5-24 
CREATE/RIGHTS command 
in Authorize utility, Sys Mgmt Util: A-L, 5-25 
CREATE SERVICE command 
in LATCP, Sys Mgmé Util: A-L, 11-12 
Creator ACEs, Sys Mgmt Util: A-L, 1-10 
specifying access, Sys Mgmt Util: A-L, 1-11 
specifying attributes, Sys Mgmt Util: A-L, 
1-10 
CREDITS class 
adding, Sys Mgmt Util: M-Z, 3-18 
fields belonging to, Sys Mgmt Util: M-Z, 3-24 
removing, Sys Mgmt Util: M-Z, 3-44 
CSR (Control and Status Register) 
addresses, Sys Mgmt Util: M-Z, 4—7, 4-9 
fixed space, Sys Mgmt Util: M-Z, D-1 
floating space, Sys Mgmt Util: M-Z, D-1 
vector addresses, Sys Mgmt Util: M-Z, 4-9 
CSR addresses 
display on AXP systems, Sys Mgmt Util: M-Z, 
5-38 
CTLIMGLIM system parameter, Sys Mgmt Util: 
M-Z, C-48 
CTLPAGES system parameter, Sys Mgmt Util: 
M-Z, C-48 


D 


Data collection 
by AUTOGEN, Sys Mgmt Util: A-L, 6-6 
Data compaction 
volume mount, Sys Mgmt Util: M-Z, 2-24 
Data field, Sys Mgmt Util: M-Z, 3-3 
Data link 
creating with LATCP, Sys Mgmt Util: A-L, 
11-7 
modifying LAT characteristics of, Sys Mgmt 
Util: A-L, 11-21 
number supported by LAT software, Sys Mgmt 
Util: A-L, 11-8 
Data record compaction 
TA9OE support, Sys Mgmt Util: A-L, 7-45 
/DATA_CHECK qualifier. 
in Mount utility, Sys Mgmt Util: M-Z, 2-18 
Dates 
See also SYSMAN command CONFIGURATION 
.. SHOW TIME 
displaying in a VMScluster, Sys Mgmt Util: 
M-Z, 5-17 
DCL commands 
in SYSMAN, Sys Mgmt Util: M-Z, 5-30 


DEADLOCK_WAIT system parameter, Sys Mgmt 


Util: M-Z, C-11 : 
DECdtm transaction manager, Sys Mgmt Util: 
M-Z, A-41 
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DECNET class record 
in Monitor utility, Sys Mgmt Util: M-Z, A-13 
Dedicated port, Sys Mgmt Util: A-L, 11-9, 11-31 
displaying, Sys Mgmt Util: A-L, 11-47 
DEFAULT command 
in Authorize utility, Sys Mgmt Util: A-L, 5-25 
Default parameter file, Sys Mgmt Util: A-L, 6-7 
Default protection 
for NETPROXY.DAT, Sys Mgmt Util: A-L, 5-38 
for RIGHTSLIST.DAT, Sys Mgmt Util: A-L, 
5-3 
for SYSUAF.DAT, Sys Mgmt Util: A-L, 5-3 
Default Protection ACEs, Sys Mgmt Util: A-L, 
1-11 
Default user authorization records 
modifying, Sys Mgmt Util: A-L, 5-26 
DEFINE command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-18 
DEFINE/KEY command, Sys Mgmt Util: M-Z, 
B-3 
in LATCP, Sys Mgmt Util: A-L, 11-14 
in Show Cluster utility, Sys Mgmt Util: M-Z, 
3-34 
Defining keys, Sys Mgmt Util: M-Z, 5-18 
to execute SYSMAN commands, Sys Mgmt 
Util: M-Z, 5-3 
DEFMBXBUFQUO system parameter, Sys Mgmt 
Util: M-Z, C-11 
DEFMBXMXMSG system parameter, Sys Mgmt 
Util: M-Z, C-11 
DEFPRI system parameter, Sys Mgmt Util: M-Z, 
C-11 
DEFQUEPRI system parameter, Sys Mgmt Util: 
M-Z, C-11 
DEINSTALL command 
in SYSGEN, Sys Mgmt Util: M-Z, 4-13 
DELETE command 
in CLUE, Sys Mgmt Util: A-L, 8-5 
in Install utility, Sys Mgmt Util: A-L, 10-10 
DELETE LINK command 
in LATCP, Sys Mgmt Util: A-L, 11-16 
DELETE PORT command 
in LATCP, Sys Mgmt Util: A-L, 11-17 
/DELETE qualifier 
in Backup utility, Sys Mgmt Util: A-L, 7-26 
DELETE SERVICE command 
in LATCP, Sys Mgmt Util: A-L, 11-18 
/DENSITY qualifier 
in Backup utility, Sys Mgmt Util: A-L, 7-26 
in Mount utility, Sys Mgmt Util: M-Z, 2-19 
DESELECT command 
in Show Cluster utility, Sys Mgmt Util: M-Z, 
3-36 
Device 
configuring VAXstation 2000 and MicroVAX 
2000 devices, Sys Mgmt Util: M-Z, D-6 
Digital supplied, Sys Mgmt Util: M-Z, D-1 


Device addresses 
See LAN addresses 
Device drivers 
addresses, Sys Mgmt Util: M-Z, 4—29 
configuring, Sys Mgmt Util: M-Z, 4-5, 4-28 
connecting, Sys Mgmt Util: M-Z, 4~9 
displaying on AXP systems, Sys Mgmt Util: 
M-Z, 5-39 
loading, Sys Mgmt Util: M-Z, 4-5, 4-9, 4-11, 
4-14 
replacing with new version of, Sys Mgmt Util: 
M-Z, 4-15 
showing configuration of, Sys Mgmt Util: M-Z, 
4-26 ; 
showing information, Sys Mgmt Util: M-Z, 
4-28, 4-29 
Device names 
specifying, Sys Mgmt Util: M-Z, 4-7, 4-9 
Devices 
connecting on AXP systems, Sys Mgmt Util: 
M-Z, 5-33, 5-34 
displaying the default, Sys Mgmt Util: M-Z, 
5-56 
logical name translation, Sys Mgmt Util: M-Z, 
5-21 
setting defaults for file specifications, Sys 
Mgmt Util: M-Z, 5-52 
specifying quotas for, Sys Mgmt Util: M-Z, 
5-21 
Device seed, Sys Mgmt Util: A-L, 11-24 
Device table, Sys Mgmt Util: M-Z, D-1 
Device types 
codes, Sys Mgmt Util: M-Z, 4-6 
descriptions, Sys Mgmt Util: M-Z, 4-6 
Directing output, Sys Mgmt Util: A-L, 3-6, 3-8 
Directing SYSGEN output, Sys Mgmt Util: M-Z, 
4-4, 4-7, 4-17 
Directories 
access to files created in, Sys Mgmt Util: A-L, 
1-10 
and Default Protection ACEs, Sys Mgmt Util: 
A-L, 1~11 
assigning a Creator ACE to, Sys Mgmt Util: 
A-L, 1-10 
creating for a new account, Sys Mgmt Util: 
A-L, 5-18 
determining access to files created in, Sys 
Mgmt Util: A-L, 1-11 
ownership . 
changing access to files, Sys Mgmt Util: 
A-L, 1-10 
Directory backlinks 
definition, Sys Mgmt Util: A-L, 3-3 
DIRECTORY command 
in CLUE, Sys Mgmt Util: A-L, 8-6 
Directory default 
displaying, Sys Mgmt Util: M-Z, 5-56 
modifying, Sys Mgmt Util: M-Z, 5-52 


Directory trees 
propagating UIC-based protection, Sys Mgmt 
Util: A-L, 1-11 
restoring, Sys Mgmt Util: A—-L, 7-9 
DISABLE command 
in SYSGEN, Sys Mgmt Util: M-Z, 4-14 
DISK class record 
in Monitor utility, Sys Mgmt Util: M—Z, A-14 
DISKQUOTA ADD command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-20 
DISKQUOTA CREATE command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-21 
DISKQUOTA DELETE command 
See DISKQUOTA REMOVE 
in SYSMAN, Sys Mgmt Util: M-Z, 5-23 
DISKQUOTA DISABLE command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-23 
DISKQUOTA ENABLE command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-24 
DISKQUOTA MODIFY command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-24 
DISKQUOTA REBUILD command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-26 
DISKQUOTA REMOVE command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-27 
Disk quotas 
creating, Sys Mgmt Util: M-Z, 5-21 
disabling, Sys Mgmt Util: M-Z, 5-238 
displaying, Sys Mgmt Util: M-Z, 5-28 
file 
adding entry, Sys Mgmt Util: M-Z, 5-20 
initializing usage count, Sys Mgmt Util: 
M-Z, 5-20 
modifying an entry, Sys Mgmt Util: M-Z, 5-25 
rebuilding, Sys Mgmt Util: M-Z, 5-26 
removing an entry, Sys Mgmt Util: M-Z, 5-23, 
5-27 
DISKQUOTA SHOW command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-28 
Disks 
making a group available 
volume, Sys Mgmt Util: M-Z, 2-20 
making a public volume, Sys Mgmt Util: M-Z, 
2-35 
mounting, Sys Mgmt Util: M-Z, 2-4 
clusterwide, Sys Mgmt Util: M-Z, 2-4, 
2-14 
for volume shadowing, Sys Mgmt Util: 
M-Z, 2-16, 2-17, 2-34 
shareable volume 
specifying, Sys Mgmt Util: M-Z, 2-34 
Disk statistics 
in Monitor utility, Sys Mgmt Util: M-Z, 1-20 
Disk usage accounting file, Sys Mgmt Util: A-L, 
E-1 
Disk volumes 
See also Disks 
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Disk volumes (cont’d) 
disabling automatic rebuild, Sys Mgmt Util: 
M-Z, 2-32 
overriding protection checks, Sys Mgmt Util: 
M-Z, 2-27 
physical loading, Sys Mgmt Util: M-Z, 2-3, 
2-37 
rebuilding, Sys Mgmt Util: M-Z, 2-32 
repairing errors, Sys Mgmt Util: A-L, 3-10 
verification, Sys Mgmt Util: A-L, 3-3 
DISK_QUORUM system parameter, Sys Mgmt 
Util: M-Z, C-12 
DISMOUMSG system parameter, Sys Mgmt Util: 
M-Z, C-12 
DISPLAY command 
in Audit Analysis utility, Sys Mgmt Util: A-L, 
4-29 
Display from SHOW CLUSTER 
display formatting, Sys Mgmt Util: M-Z, 3-4 
/DISPLAY qualifier 
in Monitor utility, Sys Mgmt Util: M-Z, 1-10 
Display screen 
refreshing with LATCP, Sys Mgmt Util: A-L, 
11-20 
SHOW CLUSTER, Sys Mgmt Util: M-Z, 3-4 
Distributed lock management statistics 
in Monitor utility, Sys Mgmt Util: M-Z, 1-22 
DLCEXTRASTK system parameter, Sys Mgmt 
Util: M-Z, C-48 
DLOCK class record 
in Monitor utility, Sys Mgmt Util: M-Z, A-16 
DNVOSI system parameter, Sys Mgmt Util: M-Z, 
C-48 
DO command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-29 
DORMANTWAIT system parameter, Sys Mgmt 
Util: M-Z, C-12 
Drivers 
loading on AXP systems, Sys Mgmt Util: M-Z, 
5-37 
Dual-architecture VMSclusters 
installing images, Sys Mgmt Util: M-Z, 5-30 
example, Sys Mgmt Util: M-Z, 5-31 
DUMPBUG system parameter, Sys Mgmt Util: 
M-Z, C-12 
DUMP command 
in LMCP, Sys Mgmt Util: A-L, 12-8 
Dump files 
changing size, Sys Mgmt Util: A-L, 6-3 
displaying the size calculated by AUTOGEN, 
Sys Mgmt Util: A-L, 6-7 
generating a new file sized by AUTOGEN, Sys 
Mgmt Util: A-L, 6-7 
DUMPSTYLE system parameter, Sys Mgmt Util: 
M-Z, C-12 
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Dynamic attributes, Sys Mgmt Util: A-L, 5-19, 
5-27, 5-35 
Dynamic parameters 
modifying, Sys Mgmt Util: M-Z, 4-34, 5-50 
Dynamic service rating, Sys Mgmt Util: A-L, 
11-12, 11-35 
displaying, Sys Mgmt Util: A-L, 11-45, 11-50 


E 


EDIT/ACL command 
See ACL editor 
Editing ACLs 
See ACL editor 
Editing sessions 
keypad editing, Sys Mgmt Util: A-L, A-1 
EDIT keypad function, Sys Mgmt Util: M-Z, 
3-34, B-3 
ENABLE command | 
in SYSGEN, Sys Mgmt Util: M-Z, 4-14 
/ENDING qualifier, Sys Mgmt Util: M-Z, 3-7 
in Monitor utility, Sys Mgmt Util: M-Z, 1-10 
END phase, Sys Mgmt Util: M-Z, 5-69 
End phase of AUTOGEN, Sys Mgmt Util: A-L, 
6-5 
default, Sys Mgmt Util: A-L, 6-10 
Environment 
defining 
in SYSMAN, Sys Mgmt Util: M-Z, 5-51 
ERLBUFFERPAGES system parameter, Sys 
Mgmt Util: M-Z, C-138 
ERRORLOGBUFFERS system parameter, Sys 
Mgmt Util: M-Z, C-13 
Error Log utility (ERROR LOG) 
/BEFORE qualifier, Sys Mgmt Util: A-L, 9-6 
/BINARY qualifier, Sys Mgmt Util: A-L, 9-6 
/BRIEF qualifier, Sys Mgmt Util: A-L, 9-7 
buffered I/O count reporting, Sys Mgmt Util: 
A-L, 9-18 
device classes, Sys Mgmt Util: A-L, 9-8, 9-11 
excluding, Sys Mgmt Util: A-L, 9-8 
including, Sys Mgmt Util: A-L, 9-11 
device name 
excluding, Sys Mgmt Util: A-L, 9-8 
including, Sys Mgmt Util: A-L, 9-12 
device name constructs, Sys Mgmt Util: A-L, 
9-8 
direct I/O count reporting, Sys Mgmt Util: 
A-L, 9-18 
directing output, Sys Mgmt Util: A-L, 9-4 
/ENTRY qualifier, Sys Mgmt Util: A-L, 9-7 
entry type 
excluding, Sys Mgmt Util: A-L, 9-9 
including, Sys Mgmt Util: A-L, 9-12 
error log file 
input file, Sys Mgmt Util: A-L, 9-4 
specifying output, Sys Mgmt Util: A-L, 
9-15 


Error Log utility (ERROR LOG) (cont'd) 
events reported, Sys Mgmt Util: A-L, 9-8 
selecting date, Sys Mgmt Util: A-L, 9-6, 
9-17 
selecting time, Sys Mgmt Util: A-L, 9-6, 
9-17 
types of, Sys Mgmt Util: A-L, 9-3 
examples, Sys Mgmt Util: A-L, 9-21 to 9-36 
/BEFORE qualifier, Sys Mgmt Util: A-L, 
9-6 
/BINARY qualifier, Sys Mgmt Util: A-L, 
9-7 
brief report, Sys Mgmt Util: A-L, 9-34 
machine check, Sys Mgmt Util: A-L, 9-23 
memory error, Sys Mgmt Util: A-L, 9-30 
nonfatal and user bugchecks, Sys Mgmt 
Util: A-L, 9-31 
sample error log report, Sys Mgmt Util: 
A-L, 9-21 
summary report, Sys Mgmt Util: A-L, 
9-34 
time-stamp, Sys Mgmt Util: A-L, 9-22 
volume dismount, Sys Mgmt Util: A-L, 
9-22 
volume mount, Sys Mgmt Util: A-L, 9-22 
/EXCLUDE qualifier, Sys Mgmt Util: A-L, 9-8 
execution time event reporting, Sys Mgmt Util: 
A-L, 9-18 
exiting from, Sys Mgmt Util: A-L, 9-4 
/FULL qualifier, Sys Mgmt Util: A-L, 9-11 
I/O events, Sys Mgmt Util: A-L, 9-18 
buffered, Sys Mgmt Util: A-L, 9-18 
direct, Sys Mgmt Util: A-L, 9-18 
/AINCLUDE qualifier, Sys Mgmt Util: A-L, 
9-11 
invoking, Sys Mgmt Util: A-L, 9-4 
/LOG qualifier, Sys Mgmt Util: A-L, 9-14 
messages 
informational, Sys Mgmt Util: A-L, 9-14 
/NODE qualifier, Sys Mgmt Util: A-L, 9-14 
output 
ASCII format, Sys Mgmt Util: A-L, 9-6 
binary format, Sys Mgmt Util: A-L, 9-6 
directing, Sys Mgmt Util: A-L, 9-6, 9-14, 
9-15, 9-16 
file specification, Sys Mgmt Util: A-L, 9-6, 
9-15 
statistical summary, Sys Mgmt Util: A-L, 
9-18 
output file, Sys Mgmt Util: A-L, 9-15 
/OUTPUT qualifier, Sys Mgmt Util: A-L, 9-15 
page faults reported, Sys Mgmt Util: A-L, 
9-18 
qualifiers, Sys Mgmt Util: A-L, 9-5 to 9-20 
/REGISTER_DUMP qualifier, Sys Mgmt Util: 
A-L, 9-15 
/REJECTED qualifier, Sys Mgmt Util: A-L, 
9-16 


Error Log utility (ERROR LOG) (cont'd) 
report format 
ASCII, Sys Mgmt Util: A-L, 9-6, 9-7 
binary, Sys Mgmt Util: A-L, 9-6, 9-11, 
9-16 
brief, Sys Mgmt Util: A-L, 9-7 
full, Sys Mgmt Util: A-L, 9-11 
hexadecimal longword, Sys Mgmt Util: 
A-L, 9-15 
register dump, Sys Mgmt Util: A-L, 9-15 
rejected entries, Sys Mgmt Util: A-L, 9-16 
run-time statistics, Sys Mgmt Util: A-L, 
9-17, 9-18 
summary, Sys Mgmt Util: A-L, 9-18 
restrictions, Sys Mgmt Util: A-L, 9-4 
/SID_REGISTER qualifier, Sys Mgmt Util: 
A-L, 9-17 
/SINCE qualifer, Sys Mgmt Util: A-L, 9-17 
/STATISTICS qualifer, Sys Mgmt Util: A-L, 


9-18 
/SUMMARY qualifier, Sys Mgmt Util: A-L, 
9-18 
Errors 
repair, Sys Mgmt Util: A-L, 3-3, 3-7, 3-9, 
3-10 


reporting, Sys Mgmt Util: A-L, 3-3 
ERRORS class 
adding, Sys Mgmt Util: M-Z, 3-19 
fields belonging to, Sys Mgmt Util: M-Z, 3-24 
removing, Sys Mgmt Util: M-Z, 3-45 
Ethernet address 
See LAN address 
Ethernet controller 
See LAN controller 
Ethernet link 
See Data link 
Event classes 
extracting audit records by, Sys Mgmt Util: 
A-L, 4-7, 4-8 
Event records 
See Security audit reports 
Event types, Sys Mgmt Util: A-L, 4—7, 4-8 
/EXACT_ORDER qualifier 
in Backup utility, Sys Mgmt Util: A-L, 7-27 
Examples 
allocating file window mapping pointers, Sys 
Mgmt Util: M-Z, 2-38 
annotated, Sys Mgmt Util: A-L, D-4 to D-8 
comparing files, Sys Mgmt Util: A-L, 7-23 
creating a disk usage accounting file, Sys 
Mgmt Util: A-L, 3-11 
creating a journal file, Sys Mgmt Util: A-L, 
7-40 
creating a volume set, Sys Mgmt Util: M-Z, 
2-11 
disabling automatic volume rebuild, Sys Mgmt 
Util: M-Z, 2-32 
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Examples (cont’d) 


enabling access to subsystems with MOUNT, 
Sys Mgmt Util: M-Z, 2-35 
image save operation, Sys Mgmt Util: A-L, 


7-36 

incremental save operation, Sys Mgmt Util: 
A-L, 7-37 

initializing an output disk, Sys Mgmt Util: 
A-L, 7-39 


list operation, Sys Mgmt Util: A-L, 7-18 

making a volume group available, Sys Mgmt 
Util: M-Z, 2-20 

making a volume public with MOUNT, Sys 
Mgmt Util: M-Z, 2-35 

mounting an ANSI-labeled magnetic tape, Sys 
Mgmt Util: M-Z, 2-21, 2-23 

mounting a volume clusterwide, Sys Mgmt 
Util: M-Z, 2-14 

overriding volume protection checks, Sys Mgmt 


Util: M-Z, 2-28 

protecting an output save-set, Sys Mgmt Util: 
A-L, 7-50 

rebuilding a volume, Sys Mgmt Util: M-Z, 
2-32 

repairing errors on a disk volume, Sys Mgmt 
Util: A-L, 3-10 

requesting operator assistance, Sys Mgmt Util: 
M-Z, 2-9 

selective backup, Sys Mgmt Util: A-L, 7-16, 
7-17 

specifying a protection code, Sys Mgmt Util: 
M-Z, 2-31 

specifying a save-set label, Sys Mgmt Util: 
A-L, 7-43 

specifying a shareable volume, Sys Mgmt Util: 
M-Z, 2-34 

specifying block size, Sys Mgmt Util: A-L, 
7-18 


specifying block size for magnetic tape, Sys 
Mgmt Util: M-Z, 2-12 
specifying default block extent, Sys Mgmt Util: 


M-Z, 2-19 

specifying density for magnetic tape, Sys Mgmt 
Util: A-L, 7-27 

specifying magnetic tape density, Sys Mgmt 
Util: M-Z, 2-19 

specifying magnetic tape record size, Sys Mgmt 
Util: M-Z, 2-33 

specifying number of directories, Sys Mgmt 
Util: M-Z, 2-8 

specifying redundancy group blocks, Sys Mgmt 
Util: A-L, 7-33 

using wildcard characters, Sys Mgmt Util: 
A-L, 7-8 


/EXCLUDE qualifier 
in Backup utility, Sys Mgmt Util: A-L, 7-29 
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EXE$GL_CPUNODSP, Sys Mgmt Util: M-Z, D-7 
EXECUTE command 
in Monitor utility, Sys Mgmt Util: M-Z, 1-6 
Execute procedure (@) command 
in Show Cluster utility, Sys Mgmt Util: M-Z, 
3-12 
to setup SHOW CLUSTER format, Sys Mgmt 
Util: M-Z, 3-12 
Execution modes 
CHECK_FEEDBACK, Sys Mgmt Util: A-L, 
6-8 
FEEDBACK, Sys Mgmt Util: A-L, 6-8 
INITIAL, Sys Mgmt Util: A-L, 6-8 
NOFEEDBACK, Sys Mgmt Util: A-L, 6-8 
EXIT command, Sys Mgmt Util: M-Z, 5-32 
in Audit Analysis utility, Sys Mgmt Util: A-L, 
4-31 
in Authorize utility, Sys Mgmt Util: A-L, 5-26 
in CLUE, Sys Mgmt Util: A-L, 8-7 
in Install utility, Sys Mgmt Util: A-L, 10-11 
in LATCP, Sys Mgmt Util: A-L, 11-18 
in Monitor utility, Sys Mgmt Util: M-Z, 1-7 
in Show Cluster utility, Sys Mgmt Util: M-Z, 
3-37 
in SYSMAN, Sys Mgmt Util: M-Z, 5-32 
Exiting from SYSGEN, Sys Mgmt Util: M-Z, 4-4 
Exiting from SYSMAN, Sys Mgmt Util: M-Z, 5-5 
EXPECTED_VOTES system parameter, Sys 
Mgmt Util: M-Z, C-13 
/EXPIRED qualifier 
in Backup utility, Sys Mgmt Util: A-L, 7-30 
/EXTENSION qualifier 
in Mount utility, Sys Mgmt Util: M-Z, 2-19 
EXTRACPU system parameter, Sys Mgmt Util: 
M-Z, C-13 
EXTRACT command 
in CLUE, Sys Mgmt Util: A-L, 8-7 
EXUSRSTK system parameter, Sys Mgmt Util: 
M-Z, C-49 


F 


/FAST qualifier 

in Backup utility, Sys Mgmt Util: A-L, 7-31 
FCP class record 

in Monitor utility, Sys Mgmt Util: M-Z, A-17 
Feedback 

See AUTOGEN, feedback 
FEEDBACK mode, Sys Mgmt Util: A-L, 6-3, 6-8 
Field of data 

definition, Sys Mgmt Util: M-Z, 3-20 

definition of each, Sys Mgmt Util: M-Z, 3-29 

removing, Sys Mgmt Util: M-Z, 3-45 
Fields 

SHOW CLUSTER, Sys Mgmt Util: M-Z, 3-3 
File backward link records 

in accounting files, Sys Mgmt Util: A-L, 2-29 


File forward link records 
in accounting files, Sys Mgmt Util: A-L, 2-29 
File primitive statistics 
in Monitor utility, Sys Mgmt Util: M-Z, 1-25 
Files 
AGEN$FEEDBACK.DAT, Sys Mgmt Util: A-L, 
6-5 
AGEN$FEEDBACK.EXE, Sys Mgmt Util: A-L, 
6-5 
AGEN$PARAMS.REPORT, Sys Mgmt Util: 
A-L, 6-7 
ALPHAVMSSYS.OLD, Sys Mgmt Util: A-L, 
6-7 
ALPHAVMSSYS.PAR, Sys Mgmt Util: A-L, 
6-7 
AUTOGEN.PAR, Sys Mgmt Util: A-L, 6-5, 
6-7; Sys Mgmt Util: M-Z, 4-33, 4-34 
containing AUTOGEN feedback, Sys Mgmt 
Util: A-L, 6-5 
containing list of known images, Sys Mgmt 
Util: A-L, 6-6 
controlling access to, Sys Mgmt Util: A-L, 
1-11, 1-13 
. creating 
dependency on directory ownership, Sys 
Memt Util: A-L, 1-10 
creating in a directory with a Default Protection 
ACE, Sys Mgmt Util: A-L, 1-11 
default parameter, Sys Mgmt Util: A-L, 6-7 
device driver, Sys Mgmt Util: M-Z, 4-15 
format required by ACL editor, Sys Mgmt Util: 
A-L, 1-4 
for paging, Sys Mgmt Util: A-L, 6-7 
for swapping, Sys Mgmt Util: A-L, 6-7 
for system crash dumps, Sys Mgmt Util: A-L, 
6-7 
I/O driver, Sys Mgmt Util: M-Z, 4-14 
input of device list, Sys Mgmt Util: M-Z, 4-7 
output cluster report, Sys Mgmt Util: M-Z, 
3-8, 3-56 
parameter, Sys Mgmt Util: A—L, 6-5, 6-7; Sys 
Mgmt Util: M-Z, 4-84 
PARAMS.DAT, Sys Mgmt Util: A-L, 6-6 
restoring to original directories, Sys Mgmt 


Util: A-L, 7-9 

SETPARAMS.DAT, Sys Mgmt Util: A-L, 6-6, 
6-7 

SHOW_CLUSTER.LIS, Sys Mgmt Util: M-Z, 
3-8, 3-56 


startup, Sys Mgmt Util: M-Z, 5-63 
disabling, Sys Mgmt Util: M-Z, 5-65 
displaying, Sys Mgmt Util: M-Z, 5-71 

startup command procedure, Sys Mgmt Util: 
M-Z, 4-17, 4-30, 4-34 

SYSGEN session output, Sys Mgmt Util: M-Z, 
4-4, 4-17 

SYSGTTSTR.MSG, Sys Mgmt Util: M-Z, 4-32 


Files (cont’d) 
SYSMAN.LIS, Sys Mgmt Util: M-Z, 5-12, 
5-17, 5-29, 5-30, 5-31, 5-46, 5-72 
system parameter, Sys Mgmt Util: M-Z, 4-33, 
4-34 
UIC-based protection 
propagating in a directory tree, Sys Mgmt 
Util: A-L, 1-11 
used by AUTOGEN command procedure, Sys 
Mgmt Util: A-L, 6-9 
VAXVMSSYS.OLD, Sys Mgmt Util: A-L, 6-7 
VAXVMSSYS.PAR, Sys Mgmt Util: A-L, 6-7; 
Sys Mgmt Util: M-Z, 4-34 
VMSIMAGES.DAT, Sys Mgmt Util: A-L, 6-6 
writing alarm messages to audit logs, Sys 
Mgmt Util: A-L, 1-8 
File system cache (ACP) system parameters 
in Monitor utility, Sys Mgmt Util: M-Z, 1-29 
File system cache statistics 
monitoring, Sys Mgmt Util: M-Z, 1-26 
File types 
specifying for ACL editor, Sys Mgmt Util: A-L, 
1-4 
File window mapping pointers 
allocating, Sys Mgmt Util: M-Z, 2-38 
FILE_SYSTEM_CACHE class record 
in Monitor utility, Sys Mgmt Util: M-Z, A-19 
Flags 
login, Sys Mgmt Util: A-L, 5-10 
Floating address, Sys Mgmt Util: M-Z, D-1 
/FLUSH_INTERVAL qualifier 
in Monitor utility, Sys Mgmt Util: M-Z, 1-10 
/FOREIGN qualifier 
in Mount utility, Sys Mgmt Util: M-Z, 2-20 
Foreign volumes 
mounting, Sys Mgmt Util: M-Z, 2-20 
Format for SHOW CLUSTER 
specifying processor types, Sys Mgmt Util: 
M-Z, 3-32 
FREEGOAL system parameter, Sys Mgmt Util: 
M-Z, C-13 
FREELIM system parameter, Sys Mgmt Util: 
M-Z, C-13 
/FULL qualifier 
in Backup utility, Sys Mgmt Util: A-L, 7-31 
Function keys, Sys Mgmt Util: A-L, 11-14 


G 


GBLPAGES system parameter, Sys Mgmt Util: 
M-Z, C-14 

GBLPAGFIL system parameter, Sys Mgmt Util: 
M-Z, C-14 

GBLSECTIONS system parameter, Sys Mgmt 
Util: M-Z, C-15 

Generic names 

showing, Sys Mgmt Util: M-Z, 4-25 
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GENFILES phase of AUTOGEN, Sys Mgmt Util: 
A-L, 6-7 
GENPARAMS phase of AUTOGEN, Sys Mgmt 
Util: A-L, 6-6 
GETDATA phase of AUTOGEN, Sys Mgmt Util: 
A-L, 6-6 
GH_RSRVPAGCNT system parameter, Sys Mgmt 
Util: M-Z, C—15 
GRANT/IDENTIFIER command 
in Authorize utility, Sys Mgmt Util: A-L, 5-27 
Group number 
local area VMScluster, Sys Mgmt Util: M-Z, 
5-14 
VMScluster 
displaying, Sys Mgmt Util: M-Z, 5-17 
/GROUP qualifier 
in Mount utility, Sys Mgmt Util: M-Z, 2-20 
Groups 
access to service nodes, Sys Mgmt Util: A-L, 
11-29, 11-45 
access to services in LAT environment, Sys 
Mgmt Util: A-L, 11-24 
/GROUP_SIZE qualifier 
in Backup utility, Sys Mgmt Util: A-L, 7-33 
GROWLIM system parameter, Sys Mgmt Util: 
M-Z, C-15 


H 


/HDR3 qualifier 
in Mount utility, Sys Mgmt Util: M-Z, 2-21 
Help 
online for Analyze Audit, Sys Mgmt Util: A-L, 
4-31 
HELP command 
in Audit Analysis utility, Sys Mgmt Util: A-L, 
4-31 
in Authorize utility, Sys Mgmt Util: A-L, 5-28 
in CLUE, Sys Mgmt Util: A-L, 8-8 
in Install utility, Sys Mgmt Util: A-L, 10-11 
in LATCP, Sys Mgmt Util: A-L, 11-19 
in Monitor utility, Sys Mgmt Util: M-Z, 1-7 
in Show Cluster utility, Sys Mgmt Util: M-Z, 
3-37 
in SYSMAN, Sys Mgmt Util: M-Z, 5-32 
HELP phase of AUTOGEN, Sys Mgmt Util: A-L, 
6-8 
Holder Hidden attributes, Sys Mgmt Util: A-L, 
5-19, 5-27, 5-35 


I 
V/O addresses, Sys Mgmt Util: M-Z, 4-31 
V/O databases, Sys Mgmt Util: M-Z, 4-28 
displaying on AXP systems, Sys Mgmt Util: 
M-Z, 5-39 


Index—14 


Y/O drivers 
loading, Sys Mgmt Util: M-Z, 4-14 
replacing with new version of, Sys Mgmt Util: 
M-Z, 4-15 
I/O statistics 
in Monitor utility, Sys Mgmt Util: M-Z, 1-30 
ICBM 
See IOGEN Configuration Building Modules 
Identifier ACEs, Sys Mgmt Util: A-L, 1-18 
types of identifiers, Sys Mgmt Util: A-L, 1-14 
Identifiers 
default, Sys Mgmt Util: A-L, 5-7 
Environmental, Sys Mgmt Util: A-L, 1-14 
General, Sys Mgmt Util: A-L, 1-14, 1-17 
granting, Sys Mgmt Util: A-L, 1-18, 5-27 
granting to a process, Sys Mgmt Util: A-L, 
1-16 
renaming, Sys Mgmt Util: A-L, 5-43 
Resource 
and directory ownership, Sys Mgmt Util: 
A-L, 1-10 
revoking, Sys Mgmt Util: A-L, 5-43 
specifying characteristics of, Sys Mgmt Util: 
A-L, 1-17 
specifying multiple pairs of, Sys Mgmt Util: 


types, Sys Mgmt Util: A-L, 1-14 
/IGNORE qualifier 
in Backup utility, Sys Mgmt Util: A-L, 7-33 
IJOBLIM system parameter, Sys Mgmt Util: 
M-Z, C-15 
Image 
See also System loadable image 
accounting, Sys Mgmt Util: A-L, 10-5, 10-8, 
10-18 
header-resident, Sys Mgmt Util: A-L, 10-6, 
10-8, 10-18 
privileged, Sys Mgmt Util: A-L, 10-6, 10-9, 
10-19 
protecting installed, Sys Mgmt Util: A-L, 
10-7, 10-9, 10-19 
Image backup 
definition, Sys Mgmt Util: A-L, 7-4 
Image mode, Sys Mgmt Util: A-L, 7-35 
/[MAGE qualifier 
in Backup utility, Sys Mgmt Util: A-L, 7-35 
Images 
applying an ACE to, Sys Mgmt Util: A-L, 1-16 
IMGIOCNT system parameter, Sys Mgmt Util: 
M-Z, C-49 
/INCLUDE qualifier 
in Mount utility, Sys Mgmt Util: M-Z, 2-22 
Incoming LAT connections, Sys Mgmt Util: A-L, 
11-22 
Incremental backup 
definition, Sys Mgmt Util: A-L, 7-4 


Incremental mode 
restoring files, Sys Mgmt Util: A-L, 7-37 
/INCREMENTAL qualifier 
in Backup utility, Sys Mgmt Util: A-L, 7-37 
Initialization files 
creating, Sys Mgmt Util: M-Z, 3-49 
default specification, Sys Mgmt Util: M-Z, 5-4 
establish SHOW CLUSTER report, Sys Mgmt 
Util: M-Z, 3-4 
use with SYSMAN, Sys Mgmt Util: M-Z, 5-4 
Initialization procedures, Sys Mgmt Util: A-L, 
D-1 
/INITIALIZE=CONTINUATION qualifier 
in Mount utility, Sys Mgmt Util: M-Z, 2-23 
INITIALIZE command 
in Monitor utility, Sys Mgmt Util: M-Z, 1-8 
in Show Cluster utility, Sys Mgmt Util: M-Z, 
3-38 
/JINITIALIZE qualifier 
in Backup utility, Sys Mgmt Util: A-L, 7-388 
INITIAL mode, Sys Mgmt Util: A-L, 6-8 
Input files 
security audit log files, Sys Mgmt Util: A-L, 
4—4 
/INPUT qualifier 
in Monitor utility, Sys Mgmt Util: M-Z, 1-11 
Input specifier, Sys Mgmt Util: A-L, 7-4, 7-5 
Input stream 
switching control to other processes, Sys Mgmt 
Util: M-Z, 5-13 
INSTALL command 
in SYSGEN, Sys Mgmt Util: M-Z, 4-11 
Install utility (INSTALL) 
commands, Sys Mgmt Util: A-L, 10-5 to 10-20 
ADD, Sys Mgmt Util: A-L, 10-5 
CREATE, Sys Mgmt Util: A-L, 10-8 
DELETE, Sys Mgmt Util: A-L, 10-10 
EXIT, Sys Mgmt Util: A-L, 10-11 
HELP, Sys Mgmt Util: A-L, 10-11 
LIST, Sys Mgmt Util: A-L, 10-12 
PURGE, Sys Mgmt Util: A-L, 10-16 
REMOVE, Sys Mgmt Util: A-L, 10-17 
REPLACE, Sys Mgmt Util: A-L, 10-18 
exiting, Sys Mgmt Util: A-L, 10-4 
invoking, Sys Mgmt Util: A-L, 10-4 
Interactive commands 
See Command mode for Audit Analysis utility 
/INTERCHANGE qualifier 
in Backup utility, Sys Mgmt Util: A-L, 7-89 
/INTERVAL qualifier, Sys Mgmt Util: M-Z, 3-8 
in Monitor utility, Sys Mgmt Util: M-Z, 1-11 
relationship of qualifier and event, Sys 
Mgmt Util: M-Z, 1-12 
INTSTKPAGES system parameter, Sys Mgmt 
Util: M-Z, C-15 


Invoking ANALYZE/DISK_STRUCTURE, Sys 
Mgmt Util: A-L, 3-6 
Invoking AUTOGEN, Sys Mgmt Util: A-L, 6-10 
Invoking SYSGEN, Sys Mgmt Util: M-Z, 4-4 
Invoking SYSMAN, Sys Mgmt Util: M-Z, 5-5 — 
privilege requirements, Sys Mgmt Util: M-Z, 
5-5 
IO AUTOCONFIGURE command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-33 
IO CONNECT command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-34 
IOGEN Configuration Building Module, Sys 
Mgmt Util: M-Z, 5-87, 5-40 
IO LOAD command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-87 
IO SET PREFIX command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-37 
IO SHOW BUS command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-38 
IO SHOW DEVICE command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-39 
IO SHOW PREFIX command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-40 
IOTA system parameter, Sys Mgmt Util: M-Z, 
C49 
ITB_ENTRIES system parameter, Sys Mgmt Util: 
M-Z, C-16 


J 


/JOURNAL qualifier 
in Backup utility, Sys Mgmt Util: A-L, 7-40 


K 


Keypad definitions, Sys Mgmt Util: M-Z, 3-4, 
3-54 
SHOW CLUSTER, Sys Mgmt Util: M-Z, B-1 
Keypad editing, Sys Mgmt Util: A-L, A-1 
editing commands, Sys Mgmt Util: A-L, A-1 
LK201-specific editing commands, Sys Mgmt 
Util: A-L, A-5 
Keys 
defining, Sys Mgmt Util: M-Z, 5-18 
defining in LATCP, Sys Mgmt Util: A-L, 11-14 
defining in SYSMAN, Sys Mgmt Util: M-Z, 
5-3 
displaying definitions, Sys Mgmt Util: M-Z, 
5-55 
KFILSTCNT system parameter, Sys Mgmt Util: 
M-Z, C-16 
Known file lists, Sys Mgmt Util: A-L, 10-3 
Known images, Sys Mgmt Util: A-L, 10-3 
adding, Sys Mgmt Util: A-L, 10-5 
attributes of, Sys Mgmt Util: A-L, 10-14 
creating, Sys Mgmt Util: A-L, 10-8 
deleting, Sys Mgmt Util: A-L, 10-10 
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Known images (cont'd) 
evaluating merits of installing, Sys Mgmt Util: 
A-L, 10-13 
removing, Sys Mgmt Util: A-L, 10-7, 10-17 
replacing, Sys Mgmt Util: A-L, 10-18 
updating, Sys Mgmt Util: A-L, 10-18 
KSTACKPAGES system parameter, Sys Mgmt 
Util: M-Z, C-16 


L 


/LABEL qualifier 
in Backup utility, Sys Mgmt Util: A-L, 7-42 
in Mount utility, Sys Mgmt Util: M-Z, 2-23 
Labels 
disk, Sys Mgmt Util: M-Z, 2-4 
disk volume set, Sys Mgmt Util: M-Z, 2-5 
magnetic tape, Sys Mgmt Util: M-Z, 2-4 
magnetic tape volume set, Sys Mgmt Util: 
M-Z, 2-5 
LAMAPREGS system parameter, Sys Mgmt Util: 
M-Z, C-16 
LAN addresses, Sys Mgmt Util: A-L, 11-7 
displaying, Sys Mgmt Util: A-L, 11-45 
LAN controllers 
address, Sys Mgmt Util: A-L, 11-45 
device name, Sys Mgmt Util: A-L, 11-7 
physical address, Sys Mgmt Util: A-L, 11-7 
LAT$STARTUP.COM command procedure, Sys 
Mgmt Util: A-L, 11-29 
LAT Control Program (LATCP) utility 
exiting, Sys Mgmt Util: A-L, 11-18 
help, Sys Mgmt Util: A—L, 11-19 
invoking, Sys Mgmt Util: A-L, 114 
LATCP 
See LAT Control Program (LATCP) utility 
LAT software 
characteristics 
added or changed, Sys Mgmt Util: A-L, 
11-4 
storing, Sys Mgmi Util: A-L, 114 
connections, Sys Mgmt Util: A-—L, 11-27, 11-49 
incoming, Sys Mgmt Util: A-L, 11-22 
outgoing, Sys Mgmt Util: A-L, 11-22 
specifying type of, Sys Mgmt Util: A-L, 
11-22 
device unit number, Sys Mgmt Util: A-L, 
11-28 
service 
creating, Sys Mgmt Util: A-L, 11-12 
database, Sys Mgmt Util: A-L, 11-26, 
11-29 
deleting, Sys Mgmt Util: A-L, 11-18 
displaying characteristics of, Sys Mgmt 
Util: A-L, 11-50 
displaying counters, Sys Mgmt Util: A-L, 
11-50 
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LAT software 
service (cont’d) 

displaying information, Sys Mgmt Util: 
A-L, 11-49 

identifier, Sys Mgmt Util: A-L, 11-12, 
11-25, 11-34 

limiting size of node database, Sys Mgmt 
Util: A-L, 11-26, 11-29 

modifying characteristics of, Sys Mgmt 
Util: A-L, 11-34 

naming, Sys Mgmt Util: A-L, 11-12, 11-21 

rating, Sys Mgmt Util: A-L, 11-12, 11-35, 


11-45, 11-50 
session limit, Sys Mgmt Util: A-L, 11-24, 
11-27 


starting with SET NODE/STATE=ON, Sys 
Mgmt Util: A-L, 11-28 
stopping with SET NODE/STATE=OFF, Sys 
Mgmt Util: A-L, 11-28 
LGI system parameters 
LGI_LBRK_DISUSER, Sys Mgmt Util: M-Z, 
C-16 
LGI_LBRK_LIM, Sys Mgmt Util: M-Z, C-16 
LGI_LBRK_TERM, Sys Mgmt Util: M-Z, C-16 
LGI_BRK_TMO, Sys Mgmt Util: M-Z, C-17 
LGI_CALLOUTS, Sys Mgmt Util: M-Z, C-17 
LGI_HID_TIM, Sys Mgmt Util: M-Z, C-17 
LGI_LPWD_TMO, Sys Mgmt Util: M-Z, C-17 
LGI_RETRY_LIM, Sys Mgmt Util: M-Z, C-17 
LGI_LRETRY_TMO, Sys Mgmt Util: M-Z, C~-17 
LICENSE LOAD command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-41 
Licenses 
deactivating, Sys Mgmt Util: M-Z, 5-42 
LICENSE UNLOAD command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-42 
Links 
creating with LATCP, Sys Mgmt Util: A-L, 
11-7 
deleting with LATCP, Sys Mgmt Util: A-L, 
11-16 
displaying characteristics using LATCP, Sys 
Mgmt Util: A-L, 11-89 
displaying counters using LATCP, Sys Mgmt 
Util: A-L, 11-36 
displaying information using LATCP, Sys 
Mgmt Util: A-L, 11-35 
modifying characteristics using LATCP, Sys 
Mgmt Util: A-L, 11-21 
name options in LATCP, Sys Mgmt Util: A-L, 
11-7 
state of in LAT environment, Sys Mgmt Util: 
A-L, 11-7 
LIST command 
in Audit Analysis utility, Sys Mgmt Util: A-L, 
4-32 
in Authorize utility, Sys Mgmt Util: A-L, 5-30 
in Install utility, Sys Mgmt Util: A-L, 10-12 


LIST/IDENTIFIER command 
in Authorize utility, Sys Mgmt Util: A-L, 5-31 
Listing 
network proxy database, Sys Mgmt Util: A-L, 
5-33 
rights database, Sys Mgmt Util: A-L, 5-381, 
5-33 
system user authorization file (SYSUAF), Sys 
Mgmt Util: A-L, 5-30 
Listing save-set information, Sys Mgmt Util: A-L, 
7-18, 7-32, 7-44 
LIST/PROXY command 
in Authorize utility, Sys Mgmt Util: A-L, 5-33 
/LIST qualifier, Sys Mgmt Util: A-L, 3-5 
in Analyze/Disk_Structure utility, Sys Mgmt 
Util: A-L, 3-8 
in Backup utility, Sys Mgmt Util: A-L, 7-44 
LIST/RIGHTS command 
in Authorize utility, Sys Mgmt Util: A-L, 5-33 
LK201-specific editing commands, Sys Mgmt Util: 
A-L, A-5 
LMCP 
See Log Manager Control Program (LMCP) 
utility 
LNMPHASHTBL system parameter, Sys Mgmt 
Util: M-Z, C-17 
LNMSHASHTBL system parameter, Sys Mgmt 
Util: M-Z, C-18 
Load balancing, Sys Mgmt Util: A-L, 11-12, 
11-35 
and CPU power, Sys Mgmt Util: A-L, 11-238 
LOAD command 
in SYSGEN, Sys Mgmt Util: M-Z, 4—14 
Loading device drivers 
on AXP systems, Sys Mgmt Util: M-Z, 5-33, 
5-34, 5-37 
Loading I/O driver, Sys Mgmt Util: M-Z, 4-14 
Load/start MSCP server, Sys Mgmt Util: M-Z, 
4-15 
LOAD_PWD_POLICY system parameter, Sys 
Mgmt Util: M-Z, C-18 
LOAD_SYS_IMAGES system parameter, Sys 
Mgmt Util: M-Z, C-18 
Local area VMScluster 
setting system date and time, Sys Mgmt Util: 
M-Z, 5-15 
LOCAL_PORTS class 
adding, Sys Mgmt Util: M-Z, 3-29 
fields belonging to, Sys Mgmt Util: M-Z, 3-24 
removing, Sys Mgmt Util: M-Z, 3-46 
LOCK class record 
in Monitor utility, Sys Mgmt Util: M-Z, A-22 
LOCKDIRWT system parameter, Sys Mgmt Util: 
M-Z, C-18 


LOCKIDTBL system parameter, Sys Mgmt Util: 
M-Z, C-18 
LOCKIDTBL_MAX system parameter, Sys Mgmt 
Util: M-Z, C-19 
LOCKRETRY system parameter, Sys Mgmt Util: 
M-Z, C-49 
Logical names 
with MOUNT, Sys Mgmt Util: M-Z, 2-5 
Login command files, Sys Mgmt Util: A-L, 5-26 
LOGIN.COM, Sys Mgmt Util: A-L, 5-26 
Log Manager Control Program (LMCP) utility, 
Sys Mgmt Util: A-L, 12-1 
CONVERT LOG command, Sys Mgmt Util: 
A-L, 12-5 
CREATE LOG command, Sys Mgmt Util: A-L, 
12-7 
DUMP command, Sys Mgmt Util: A-L, 12-8 
HELP command, Sys Mgmt Util: A-L, 12-12 
REPAIR command, Sys Mgmt Util: A-L, 12-13 
ABORT subcommand, Sys Mgmt Util: 
A-L, 12-15 
COMMIT subcommand, Sys Mgmt Util: 
A-L, 12-15 
EXIT subcommand, Sys Mgmt Util: A-L, 
12-15 
FORGET subcommand, Sys Mgmt Util: 
A-L, 12-15 ; 
NEXT subcommand, Sys Mgmt Util: A-L, 
12-15 
SHOW LOG command, Sys Mgmt Util: A-L, 
12-16 
/LOG qualifier 
in Backup utility, Sys Mgmt Util: A-L, 7-45 
LONGWAIT system parameter, Sys Mgmt Util: 
M-Z, C-19 
Lost files 
recovering, Sys Mgmt Util: A-L, 3-4 
LPBEGIN phase of system startup, Sys Mgmt 
Util: M-Z, 5-69 
LPBETA phase of system startup, Sys Mgmt Util: 
M-Z, 5-69 
LPMAIN phase of system startup, Sys Mgmt Util: 
M-Z, 5-69 
LTA device, Sys Mgmt Util: A-L, 11-24 
LTDRIVER 
turning on and off, Sys Mgmt Util: A-L, 11-3 


M 


Magnetic tape devices 
serving within a cluster, Sys Mgmt Util: M-Z, 
C-39 
Magnetic tapes 
mounting, Sys Mgmt Util: M-Z, 2-4 
mounting ANSI-labeled, Sys Mgmt Util: M-Z, 
2-21, 2-23 
mounting multiple foreign volumes, Sys Mgmt 
Util: M-Z, 2-26 
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Magnetic tapes (cont'd) 
overriding protection checks, Sys Mgmt Util: 
M-Z, 2-27 
specifying block size for, Sys Mgmt Util: M-Z, 
2-11 
specifying density for, Sys Mgmt Util: M-Z, 
2-19 
specifying record size for, Sys Mgmt Util: M-Z, 
2-33 
Management environment 
defining, Sys Mgmt Util: M-Z, 5-51 
MAXBUF system parameter, Sys Mgmt Util: 
M-Z, C-19 
MAXCLASSPRI system parameter, Sys Mgmt 
Util: M-Z, C-49 
MAXPROCESSCNT system parameter, Sys Mgmt 
Util: M-Z, C-19 
MAXQUEPRI system parameter, Sys Mgmt Util: 
M-Z, C-19 
MAXSYSGROUP system parameter, Sys Mgmt 
Util: M-Z, C—19 
MCR command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-5, 5-30 
/MEDIA_FORMAT=CD-ROM qualifier 
in Mount utility, Sys Mgmt Util: M-Z, 2-23 
/MEDIA_FORMAT=[NO]JCOMPACTION qualifier 
in Mount utility, Sys Mgmt Util: M-Z, 2-24 
/MEDIA_FORMAT qualifier 
in Backup utility, Sys Mgmt Util: A-L, 7-45 
MEMBERS class 
adding, Sys Mgmt Util: M-Z, 3-31 
fields belonging to, Sys Mgmt Util: M-Z, 3-26 
removing, Sys Mgmt Util: M-Z, 3-47 
Memory 
multiport, Sys Mgmt Util: M-Z, 4-18 
/MESSAGE qualifier 
in Mount utility, Sys Mgmt Util: M-Z, 2-25 
MINCLASSPRI system parameter, Sys Mgmt 
Util: M-Z, C-49 
MINWSCNT system parameter, Sys Mgmt Util: 
M-Z, C-20 
MMG_CTLFLAGS system parameter, Sys Mgmt 
Util: M-Z, C—20 
MODES class record 
in Monitor utility, Sys Mgmt Util: M-Z, A-23 
Modes of execution, Sys Mgmt Util: A-L, 6-8 
for SYSMAN Startup files, Sys Mgmt Util: 
M-Z, 5-64 
Modes of operation, Sys Mgmt Util: A-L, 3-3 
image, Sys Mgmt Util: A-L, 7-85 
physical, Sys Mgmt Util: A-L, 7-48 
/MODIFIED qualifier 
in Backup utility, Sys Mgmt Util: A-L, 7-46 
MODIFY command 
in Authorize utility, Sys Mgmt Util: A-L, 5-34 
MODIFY/IDENTIFIER command 
in Authorize utility, Sys Mgmt Util: A-L, 5-35 


Index—18 


Modifying page,swap and dump file sizes, Sys 
Memt Util: A-L, 6-3 
Modifying system parameters 
recommended method, Sys Mgmt Util: A-L, 
6-3 
MODIFY/PROXY command 
in Authorize utility, Sys Mgmt Util: A-L, 5-37 
MODIFY/SYSTEM_PASSWORD command 
in Authorize utility, Sys Mgmt Util: A-L, 5-38 
MONITOR ALL_CLASSES command 
in Monitor utility, Sys Mgmt Util: M-Z, 1-13 
MONITOR CLUSTER command 
in Monitor utility, Sys Mgmt Util: M-Z, 1-15 
MONITOR command 
in Monitor utility, Sys Mgmt Util: M-Z, 1-8 
MONITOR DECNET command 
in Monitor utility, Sys Mgmt Util: M-Z, 1-19 
MONITOR DISK command 
in Monitor utility, Sys Mgmt Util: M-Z, 1-20 
MONITOR DLOCK command 
in Monitor utility, Sys Mgmt Util: M-Z, 1-22 
MONITOR FCP command 
in Monitor utility, Sys Mgmt Util: M-Z, 1-25 
MONITOR FILE_SYSTEM_CACHE command 
in Monitor utility, Sys Mgmt Util: M-Z, 1-26 
MONITOR IO command 
in Monitor utility, Sys Mgmt Util: M-Z, 1-30 
MONITOR LOCK command 
in Monitor utility, Sys Mgmt Util: M-Z, 1-32 
MONITOR MODES command 
in Monitor utility, Sys Mgmt Util: M-Z, 1-33 
MONITOR MSCP_SERVER command 
in Monitor utility, Sys Mgmt Util: M-Z, 1-36 
MONITOR PAGE command 
in Monitor utility, Sys Mgmt Util: M-Z, 1-38 
MONITOR PROCESSES command 
in Monitor utility, Sys Mgmt Util: M-Z, 1-40 
MONITOR RMS command 
in Monitor utility, Sys Mgmt Util: M-Z, 1-43 
MONITOR SCS command 
in Monitor utility, Sys Mgmt Util: M-Z, 1-47 
MONITOR STATES command 
in Monitor utility, Sys Mgmt Util: M-Z, 1-50 
MONITOR SYSTEM command 
in Monitor utility, Sys Mgmt Util: M-Z, 1-53 
MONITOR TRANSACTION command 
in Monitor utility, Sys Mgmt Util: M-Z, 1-57 
Monitor utility (MONITOR) 
Class-name qualifiers 
/ALL, Sys Mgmt Util: M-Z, 1-14 
/AVERAGE, Sys Mgmt Util: M-Z, 1-14 
/CPU, Sys Mgmt Util: M-Z, 1-34 
/CURRENT, Sys Mgmt Util: M-Z, 1-14 
AITEM, Sys Mgmt Util: M-Z, 1-20, 1-48 
/MAXIMUM, Sys Mgmt Util: M-Z, 1-14 
/MINIMUM, Sys Mgmt Util: M-Z, 1-14 
/PERCENT, Sys Mgmt Util: M-Z, 1-21 
/TOPBIO, Sys Mgmt Util: M-Z, 1-40 


Monitor utility (MONITOR) 

Class-name qualifiers (cont’d) 
/TOPCPU, Sys Mgmt Util: M-Z, 1-40 
/TOPDIO, Sys Mgmt Util: M-Z, 1-41 
/TOPFAULT, Sys Mgmt Util: M-Z, 1-41 
/TOPRBS, Sys Mgmt Util: M-Z, 1-41 

Cluster performance statistics, Sys Mgmt Util: 
M-Z, 1-15 

collection interval, Sys Mgmt Util: M-Z, 1-11 

Command qualifiers, Sys Mgmt Util: M-Z, 1-9 
to 1-13 

commands, Sys Mgmt Util: M-Z, 1-5 to 2-1 
CONVERT, Sys Mgmt Util: M-Z, 1-5 
EXECUTE, Sys Mgmt Util: M-Z, 1-6 
EXIT, Sys Mgmt Util: M-Z, 1-7 
HELP, Sys Mgmt Util: M-Z, 1-7 
INITIALIZE, Sys Mgmt Util: M-Z, 1-8 
MONITOR, Sys Mgmt Util: M-Z, 1-8 
MONITOR ALL_CLASSES, Sys Mgmt 


Util: M-Z, 1-13 

MONITOR CLUSTER, Sys Mgmt Util: 
M-Z, 1-15 

MONITOR DECNET, Sys Mgmt Util: 
M-Z, 1-19 

MONITOR DISK, Sys Mgmt Util: M-Z, 
1-20 

MONITOR DLOCK, Sys Mgmt Util: M-Z, 
1-22 

MONITOR FCP, Sys Mgmt Util: M-Z, 
1-25 


MONITOR FILE_SYSTEM_CACHE, Sys 
Mgmt Util: M-Z, 1-26 

MONITOR I0, Sys Mgmt Util: M-Z, 1-30 

MONITOR LOCK, Sys Mgmt Util: M=Z, 


1-32 

MONITOR MODES, Sys Mgmt Util: M-Z, 
1-33 

MONITOR MSCP_SERVER, Sys Mgmt 
Util: M-Z, 1-36 

MONITOR PAGE, Sys Mgmt Util: M-Z, 
1-38 

MONITOR PROCESSES, Sys Mgmt Util: 
M-Z, 1-40 

MONITOR RMS, Sys Mgmt Util: M-Z, 
1-43 

MONITOR SCS, Sys Mgmt Util: M-Z, 
1-47 

MONITOR STATES, Sys Mgmt Util: M-Z, 
1-50 

MONITOR SYSTEM, Sys Mgmt Util: 
M-Z, 1-53 

MONITOR TRANSACTION, Sys Mgmt 
Util: M-Z, 1-57 

MONITOR VBS, Sys Mgmi Util: M-Z, 
1-59 

SET DEFAULT, Sys Mgmt Util: M-Z, 
1-62 


Monitor utility (MONITOR) 
commands (cont'd) 
SHOW DEFAULT, Sys Mgmt Util: M-Z, 
1-63 
directing output, Sys Mgmt Util: M-Z, 1-4 
exiting, Sys Mgmt Util: M-Z, 1-4 
invoking, Sys Mgmt Util: M-Z, 1-4 
recording file record formats, Sys Mgmt Util: 
M-Z, A-1 to A-13 
relationship of qualifier and event, Sys Mgmt 
Util: M-Z, 1-12 
MONITOR VBS command 
in Monitor utility, Sys Mgmt Util: M-Z, 1-59 
MONITOR VECTOR command, Sys Mgmt Util: 
M-Z, 1-60 
MONITOR_SERVER process 
log file, Sys Mgmt Util: M-Z, 1-17 
network startup, Sys Mgmt Util: M-Z, 1-16 
purpose, Sys Mgmt Util: M-Z, 1-16 
startup time, Sys Mgmt Util: M-Z, 1-17 
MOUNT command 
avoiding use of /CLUSTER with SYSMAN DO 
command, Sys Mgmt Util: M-Z, 5-30 
Mount error message, Sys Mgmt Util: A-L, 7-55 
MOUNTMSG system parameter, Sys Mgmt Util: 
M-Z, C—20 
Mount utility (MOUNT) 
directing output, Sys Mgmt Util: M-Z, 2-6 
examples, Sys Mgmt Util: M-Z, 2-40 to 2-42 
allocating file window mapping pointers, 
Sys Mgmt Util: M-Z, 2-38 
creating a volume set, Sys Mgmt Util: 
M-Z, 2-11 
disabling automatic rebuild, Sys Mgmt 
Util: M-Z, 2-32 
enabling access to subsystems, Sys Mgmt 
Util: M-Z, 2-35 
making a volume public, Sys Mgmt Util: 
M-Z, 2-35 
mounting an ANSI-labeled magnetic tape, 
Sys Mgmt Util: M-Z, 2-21, 2-23 
mounting a volume clusterwide, Sys Mgmt 
Util: M-Z, 2-14 
overriding volume protection checks, Sys 
Mgmt Util: M-Z, 2-28 
rebuilding a disk volume, Sys Mgmt Util: 
M-Z, 2-32 
requesting operator assistance, Sys Mgmt 
Util: M-Z, 2-9, 2-40 
specifying a protection code, Sys Mgmt 
Util: M-Z, 2-31 
specifying a shareable volume, Sys Mgmt 
Util: M-Z, 2-34 
specifying block size for magnetic tape, Sys 
Mgmt Util: M-Z, 2-12 
specifying default block extent, Sys Mgmt 
Util: M-Z, 2-19 
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Mount utility (MOUNT) 
examples (cont’d) 
specifying magnetic tape density, Sys 
Mgmt Util: M-Z, 2-19 
specifying magnetic tape record size, Sys 
Mgmt Util: M-Z, 2-33 
specifying number of directories, Sys Mgmt 
Util: M-Z, 2-8 
exiting, Sys Mgmt Util: M-Z, 2-6 
invoking, Sys Mgmt Util: M-Z, 2-6 
multiple foreign tape volumes, Sys Mgmt Util: 
M-Z, 2-26 
overriding volume protection checks, Sys Mgmt 
Util: M-Z, 2-27 
parameters, Sys Mgmt Util: M-Z, 2-4 
qualifiers, Sys Mgmt Util: M-Z, 2-8 to 2-39 
/ACCESSED, Sys Mgmt Util: M-Z, 2-8 
/ASSIST, Sys Mgmt Util: M-Z, 2-8 
/AUTOMATIC, Sys Mgmt Util: M-Z, 2-9 
/BIND, Sys Mgmt Util: M-Z, 2-10 
/BLOCKSIZE, Sys Mgmt Util: M-Z, 2-11 
/CACHE, Sys Mgmt Util: M-Z, 2-12 
/CLUSTER, Sys Mgmt Util: M-Z, 2-14 
/COMMENT, Sys Mgmt Util: M-Z, 2-15 
/CONFIRM, Sys Mgmt Util: M-Z, 2-16 
/COPY, Sys Mgmt Util: M-Z, 2-17 
/DATA_CHECK, Sys Mgmt Util: M-Z, 
2-18 
/DENSITY, Sys Mgmt Util: M-Z, 2-19 
/EXTENSION, Sys Mgmt Util: M-Z, 2-19 
/FOREIGN, Sys Mgmt Util: M-Z, 2-20 
/GROUP, Sys Mgmt Util: M-Z, 2-20 
/HDR3, Sys Mgmt Util: M-Z, 2-21 
INCLUDE, Sys Mgmt Util: M-Z, 2-22 
/JINITIALIZE=CONTINUATION, Sys 
Mgmt Util: M-Z, 2-23 
/LABEL, Sys Mgmt Util: M-Z, 2-23 
/MEDIA_FORMAT=CD-ROM, Sys Mgmt 
Util: M-Z, 2-23 
/MEDIA_FORMAT=[NO]COMPACTION, 
Sys Mgmt Util: M-Z, 2-24 
/MESSAGE, Sys Mgmt Util: M-Z, 2-25 


/MOUNT_VERIFICATION, Sys Mgmt Util: 


M-Z, 2-25 
/MULTI_VOLUME, Sys Mgmt Util: M-Z, 
2-26 
/OVERRIDE, Sys Mgmt Util: M-Z, 2-27 
/OWNER_UIC, Sys Mgmt Util: M-Z, 2-29 
/PROCESSOR, Sys Mgmt Util: M-Z, 2-29 
/PROTECTION, Sys Mgmt Util: M-Z, 
2-30 
/QUOTA, Sys Mgmt Util: M-Z, 2-31 
/REBUILD, Sys Mgmt Util: M-Z, 2-32 
/RECORDSIZE, Sys Mgmt Util: M-Z, 2-33 
/SHADOW, Sys Mgmt Util: M-Z, 2-34 
/SHARE, Sys Mgmt Util: M-Z, 2-34 
/SUBSYSTEM, Sys Mgmt Util: M-Z, 2-35 
/SYSTEM, Sys Mgmt Util: M-Z, 2-35 
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Mount utility (MOUNT) 
qualifiers (cont'd) 
/UNDEFINED_FAT, Sys Mgmt Util: M-Z, 
2-36 
/UNLOAD, Sys Mgmt Util: M-Z, 2-37 
/WINDOWS, Sys Mgmt Util: M-Z, 2-38 
/WRITE, Sys Mgmt Util: M-Z, 2-38 
requesting an ancillary control process (ACP), 
Sys Mgmt Util: M-Z, 2-29 
restrictions, Sys Mgmt Util: M-Z, 2-7 
specifying a user identification code (UIC), Sys 
Mgmt Util: M-Z, 2-29 
specifying write protection, Sys Mgmt Util: 
M-Z, 2-38 
/MOUNT_VERIFICATION qualifier 
in Mount utility, Sys Mgmt Util: M-Z, 2-25 
MOVE command 
in Show Cluster utility, Sys Mgmt Util: M-Z, 
3-38 
MOVE keypad function, Sys Mgmt Util: M-Z, 
B-3 
MPW_HILIMIT system parameter, Sys Mgmt 
Util: M~Z, C-20 
MPW_IOLIMIT system parameter, Sys Mgmt 
Util: M-Z, C-20 
MPW_LOLIMIT system parameter, Sys Mgmt 
Util: M-Z, C-21 
MPW_LOWAITLIMIT system parameter, Sys 
Memt Util: M~Z, C-21 
MPW_PRIO system parameter, Sys Mgmt Util: 
M-Z, C-49 
MPW_THRESH system parameter, Sys Mgmt 
Util: M-Z, C-21 
MPW_WAITLIMIT system parameter, Sys Mgmt 
Util: M-Z, C-21 
MPW_WRTCLUSTER system parameter, Sys 
Mgmt Util: M-Z, C-21 
MSCP command 
in SYSGEN, Sys Mgmt Util: M-Z, 4-15 
MSCP server 
loading, Sys Mgmt Util: M-Z, 4-15 
starting, Sys Mgmt Util: M-Z, 4-15 
MSCP_BUFFER system parameter, Sys Mgmt 
Util: M-Z, C—22 
MSCP_CREDITS system parameter, Sys Mgmt 
Util: M-Z, C-22 
MSCP_LOAD system parameter, Sys Mgmt Util: 
M-Z, C-22 
MSCP_SERVER class record 
in Monitor utility, Sys Mgmt Util: M-Z, A-25 
MSCP_SERVE_ALL system parameter, Sys Mgmt 
Util: M-Z, C-22 
Multicast address 
VMScluster 
displaying, Sys Mgmt Util: M-Z, 5-17 


Multicast messages, Sys Mgmt Util: A-L, 11-18, 
11-36 
timer for, Sys Mgmt Util: A-L, 11-26 
Multiport memory 
connecting, Sys Mgmt Util: M-Z, 4-18 
initializing, Sys Mgmt Util: M-Z, 4-19 
sharing, Sys Mgmt Util: M-Z, 4-18 
MULTIPROCESSING system parameter, Sys 
Mgmt Util: M-Z, C-22 
/MULTI_VOLUME qualifier 
in Mount utility, Sys Mgmt Util: M-Z, 2-26 


MVTIMEOUT system parameter, Sys Mgmt Util: 


M-Z, C-23 


N 


Name Hidden attributes, Sys Mgmt Util: A-L, 


5-19, 5-27, 5-35 
NETPROXY (network proxy authorization files) 
creating, Sys Mgmt Util: A-L, 5-24 
displaying proxy access, Sys Mgmt Util: A-L, 
5-49 
modifying, Sys Mgmt Util: A-L, 5-38 
Network proxy authorization file 


See NETPROXY 
Network statistics 
in Monitor utility, Sys Mgmt Util: M-Z, 1-19 
NET_CALLOUTS system parameter, Sys Mgmt 
Util: M-Z, C—23 
/NEW_VERSION qualifier 
in Backup utility, Sys Mgmt Util: A-L, 7-47 
NEXT FILE command 
in Audit Analysis utility, Sys Mgmt Util: A-L, 
4-32 
NEXT RECORD command 
in Audit Analysis utility, Sys Mgmt Util: A-L, 
4-33 
Nexus numbers 
showing, Sys Mgmt Util: M-Z, 4-25, 4-30 
NISCS_CONV_BOOT system parameter, Sys 
Mgmt Util: M-Z, C-23 
NISCS_LAN_OVRHD system parameter, Sys 
Mgmt Util: M-Z, C-28 
NISCS_LOAD_PEAO system parameter, Sys 
Mgmt Util: M-Z, C-23 
NISCS_MAX_PKTSZ system parameter, Sys 
Mgmt Util: M-Z, C-24 
NISCS_PORT_SERV system parameter, Sys 
Mgmt Util: M-Z, C-24 
NJOBLIM system parameter, Sys Mgmt Util: 
M-Z, C-24 
No Access attributes, Sys Mgmt Util: A-L, 5-19, 
5-27, 5-35 
NOAUTOCONFIG system parameter, Sys Mgmt 
Util: M-Z, C-49 


NOCLUSTER system parameter, Sys Mgmt Util: 
M-Z, C-49 
Node numbers 
display on AXP systems, Sys Mgmt Util: M-Z, 
5-38 
/NODE qualifier 
in Monitor utility, Sys Mgmt Util: M-Z, 1-12 
Nodes 
database, Sys Mgmt Util: A-L, 11-26, 11-29 
displaying characteristics of, Sys Mgmt Util: 
A-L, 11-44 
displaying counters, Sys Mgmt Util: A-L, 
11-41 
displaying information using LATCP, Sys 
Mgmt Util: A-L, 11-41 
limit, Sys Mgmt Util: A-L, 11-26 
modifying characteristics of, Sys Mgmt Util: 
A-L, 11-22 
name, Sys Mgmt Util: A-L, 11-22 
state, Sys Mgmt Util: A-L, 11-27 
target, Sys Mgmt Util: A-L, 11-48, 11-49 
NOFEEDBACK mode, Sys Mgmt Util: A-L, 6-8 
NOPGSWP system parameter, Sys Mgmt Util: 
M-Z, C-49 
/INOJCONFIRM qualifier 
in Analyze/Disk_Structure utility, Sys Mgmt 
Util: A-L, 3-7 
/AINOJLIST qualifier 
in Analyze/Disk_Structure utility, Sys Mgmt 
Util: A-L, 3-8 
/INOJOUTPUT qualifier 
in Analyze/Disk_Structure utility, Sys Mgmt 
Util: A—L, 3-8 
/INOJREAD_CHECK qualifier 
in Analyze/Disk_Structure utility, Sys Mgmt 
Util: A-L, 3-9 
/[NOJREPAIR qualifier 
in Analyze/Disk_Structure utility, Sys Mgmt 
Util: A-L, 3-10 
NPAGEDYN system parameter, Sys Mgmt Util: 
M-Z, C-24 
NPAGEVIR system parameter, Sys Mgmt Util: 
M-Z, C-24 


O 


Object classes 
security class object, Sys Mgmt Util: A-L, 1-4 
Objects 
controlling access to, Sys Mgmt Util: A-L, 
1-138 
OpenVMS RMS 
See RMS 
Operations 
compare, Sys Mgmt Util: A-L, 7-22 
list, Sys Mgmt Util: A-L, 7-18, 7-82, 7-44 
performed by BACKUP, Sys Mgmt Util: A-L, 
7-3 
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Operator assistance 
with BACKUP, Sys Mgmt Util: A-L, 7-14 
Outgoing LAT connections, Sys Mgmt Util: A-L, 
11-22 
Outgoing port 
displaying, Sys Mgmt Util: A-L, 11-47 
Output, Sys Mgmt Util: A-L, 3-6 
directing, Sys Mgmt Util: A-L, 3-5; Sys Mgmt 
Util: M-Z, 3-56 
directing Show Cluster, Sys Mgmt Util: M-Z, 
3-5, 3-8 
directing SYSGEN, Sys Mgmt Util: M-Z, 4-38, 
4—7, 4-17, 4-26 
file specifying, Sys Mgmt Util: M-Z, 3-5, 3-8, 
3-56 
specifying file, Sys Mgmt Util: M-Z, 4-7, 4-17 
Output messages 
volume mount, Sys Mgmt Util: M-Z, 2-8, 2—25 
/OUTPUT qualifier, Sys Mgmt Util: M-Z, 3-8 
in Analyze/Disk_Structure utility, Sys Mgmt 
Util: A-L, 3-8 
in Monitor utility, Sys Mgmt Util: M-Z, 1-12 
Output specifier, Sys Mgmt Util: A-L, 7-4, 7-5 
/OVERLAY qualifier 
in Backup utility, Sys Mgmt Util: A-L, 7-47 
/OVERRIDE qualifier 
in Mount utility, Sys Mgmt Util: M-Z, 2-27 
/OWNER_UIC qualifier 
as Backup utility input file qualifier, Sys Mgmt 
Util: A-L, 7-48 
in Mount utility, Sys Mgmt Util: M-Z, 2-29 


p 


PAGE class record . 
in Monitor utility, Sys Mgmt Util: M-Z, A-27 
PAGEDYN system parameter, Sys Mgmt Util: 
M-Z, C-24 
PAGEFILE.SYS file 
See Page files 
Page files 
changing size, Sys Mgmt Util: A-L, 6-3 
displaying the size calculated by AUTOGEN, 
Sys Mgmt Util: A-L, 6-7 
generating a new file sized by AUTOGEN, Sys 
Mgmt Util: A-L, 6-7 
Page management statistics 
in Monitor utility, Sys Mgmt Util: M-Z, 1-38 
PAGFILCNT system parameter, Sys Mgmt Util: 
M-Z, C~25 
PAGTBLPFC system parameter, Sys Mgmt Util: 
M-Z, C-49 
PAMAXPORT system parameter, Sys Mgmt Util: 
M-Z, C-25 
PAN command 
in Show Cluster utility, Sys Mgmt Util: M-Z, 
3-40 
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PAN keypad function, Sys Mgmt Util: M-Z, B-3 
PANOPOLL system parameter, Sys Mgmt Util: 
M-Z, C-25 
PANUMPOLL system parameter, Sys Mgmt Util: 
M-Z, C-25 
PAPOLLINTERVAL system parameter, Sys Mgmt 
Util: M-Z, C-25 
PAPOOLINTERVAL system parameter, Sys Mgmt 
Util: M-Z, C—25 
Parameter files 
ALPHAVMSSYS.OLD, Sys Mgmt Util: A-L, 
6-7 
ALPHAVMSSYS.PAR, Sys Mgmt Util: A-L, 
6-7 
AUTOGEN.PAR, Sys Mgmt Util: A-L, 6-7 
default, Sys Mgmt Util: A-L, 6-7 
VAXVMSSYS.OLD, Sys Mgmt Util: A-L, 6-7 
VAXVMSSYS.PAR, Sys Mgmt Util: A-L, 6-7 
writing, Sys Mgmt Util: M-Z, 4~34, 5-50 
Parameters, Sys Mgmt Util: M-Z, 2-4 
See also System parameter 
changing, Sys Mgmt Util: M-Z, 5-44 
PARAMETERS DISABLE CHECKS command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-43 
PARAMETERS ENABLE CHECKS command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-44 
PARAMETERS SET command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-44 
PARAMETERS SHOW command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-45 
PARAMETERS USE command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-49 
PARAMETERS WRITE command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-50 
PARAMS.DAT file, Sys Mgmt Util: A-L, 6-6, 6-7 
PASANITY system parameter, Sys Mgmt Util: 
M-Z, C-26 
Password, Sys Mgmt Util: M~Z, 5-51 
for local area VMScluster, Sys Mgmt Util: 
M-Z, 5-14 
PASTDGBUEF system parameter, Sys Mgmt Util: 
M-Z, C-26 
Paste buffers, Sys Mgmt Util: A-L, A-5 
PASTIMOUT system parameter, Sys Mgmt Util: 
M-Z, C-—26 
PE system parameter, Sys Mgmt Util: M-Z, C-49 
PFCDEFAULT system parameter, Sys Mgmt Util: 
M-Z, C-26 
PFRATH system parameter, Sys Mgmt Util: M-Z, 
C-26 
PFRATL system parameter, Sys Mgmt Util: M-Z, 
C-27 
PFRATS system parameter, Sys Mgmt Util: M-Z, 
C49 
Phases of AUTOGEN, Sys Mgmt Util: A-L, 6-5 


Physical mode, Sys Mgmt Util: A-L, 7-48 

PHYSICALPAGES system parameter, Sys Mgmt 
Util: M-Z, C-50 

/PHYSICAL qualifier 

in Backup utility, Sys Mgmt Util: A-L, 7-48 

PHYSICAL_MEMORY system parameter, Sys 
Mgmt Util: M-Z, C-50 

PIOPAGES system parameter, Sys Mgmt Util: 
M-Z, C-—50 

PIXSCAN system parameter, Sys Mgmt Util: 
M-Z, C-50 

POOLCHECK system parameter, Sys Mgmt Util: 
M-Z, C-50 


POOLPAGING system parameter, Sys Mgmt Util: 


M-Z, C-50 
Ports 
application, Sys Mgmt Util: A-L, 11-9, 11-31, 
11-32, 11-33, 11-47 
characteristics, Sys Mgmt Util: A-L, 11-46 
creating with LATCP, Sys Mgmt Util: A-L, 
11-8 
dedicated, Sys Mgmt Util: A-L, 11-9, 11-31, 
11-47 
deleting with LATCP, Sys Mgmi Util: A-L, 
11-17 
displaying characteristics of, Sys Mgmt Util: 
A-L, 11-47 
displaying information using LATCP, Sys 
Mgmt Util: A-L, 11-46 
logical name of, Sys Mgmt Util: A-L, 11-9 
modifying characteristics of with LATCP, Sys 
Mgmt Util: A-L, 11-31 
name, Sys Mgmt Util: A-L, 11-31 
outgoing connection, Sys Mgmt Util: A-L, 
11-47 
setting type of, Sys Mgmt Util: A-L, 11-9 
target, Sys Mgmt Util: A-L, 11-49 
POSITION command 
in Audit Analysis utility, Sys Mgmt Util: A-L, 
4-33 
PQL system parameters 
PQL_DASTLM, Sys Mgmt Util: M-Z, C-27 
PQL_DBIOLM, Sys Mgmt Util: M-Z, C-27 
PQL_DBYTLM, Sys Mgmt Util: M-Z, C-27 
PQL_DCPULM, Sys Mgmt Util: M-Z, C-27 
PQL_DDIOLM, Sys Mgmt Util: M-Z, C-27 
PQL_DENQLM, Sys Mgmt Util: M-Z, C-27 
PQL_DFILLM, Sys Mgmt Util: M-Z, C-27 
PQL_DJTQUOTA, Sys Mgmt Util: M-Z, C-27 
PQL_DPGFLQUOTA, Sys Mgmt Util: M-Z, 
C-28 
PQL_DPRCLM, Sys Mgmt Util: M-Z, C-28 
PQL_DTQELM, Sys Mgmt Util: M-Z, C-28 
PQL_DWSDEFAULT, Sys Mgmt Util: M-Z, 
C-28 
PQL_DWSEXTENT, Sys Mgmt Util: M-Z, 
C-28 
PQL_DWSQUOTA, Sys Mgmt Util: M-Z, C—28 


PQL system parameters (cont'd) 


PQL_MASTLM, Sys Mgmt Util: M-~Z, C—28 
PQL_MBIOLM, Sys Mgmt Util: M-Z, C-28 
PQL_MBYTLM, Sys Mgmt Util: M-Z, C—28 
PQL_MCPULM, Sys Mgmt Util: M-Z, C—28 
PQL_MDIOLM, Sys Mgmt Util: M-Z, C-28 
PQL_MENQLM, Sys Mgmt Util: M-Z, C-28 
PQL_MFILLM, Sys Mgmt Util: M-Z, C-29 
PQL_MJTQUOTA, Sys Mgmt Util: M-Z, C-29 
PQL_MPGFLQUOTA, Sys Mgmt Util: M-Z, 
C-29 
PQL_MPRCLM, Sys Mgmt Util: M-Z, C-29 
PQL_MTQELM, Sys Mgmt Util: M-Z, C—29 
PQL_MWSDEFAULT, Sys Mgmt Util: M-Z, 
C-29 
PQL_MWSEXTENT, Sys Mgmt Util: M-Z, 
C-29 
PQL_MWSQUOTA, Sys Mgmt Util: M-Z, C-29 


PRCPOLINTERVAL system parameter, Sys Mgmt 


Util: M-Z, C-29 


Prefix list 


displaying on AXP systems, Sys Mgmt Util: 
M-Z, 5-40 

setting on AXP systems, Sys Mgmt Util: M-Z, 
5-37 


Printers 


configuring in a LAT environment, Sys Mgmt 
Util: A-L, 11-9, 11-31 


PRIORITY_OFFSET system parameter, ' Sys 


Mgmt Util: M-Z, C-29 


Privileges, Sys Mgmt Util: M-Z, 2-7 


assigning to installed images, Sys Mgmt Util: 
A-L, 10-9 

assigning to known images, Sys Mgmt Util: 
A-L, 10-7 

displaying current, Sys Mgmt Util: M-Z, 5-56 

modifying for environment, Sys Mgmt Util: 
M-Z, 5-52 

needed to perform BACKUP operations, Sys 
Mgmt Util: A-L, 7-11 

required by ACL editor, Sys Mgmt Util: A-L, 
‘1-4 

required by SYSMAN, Sys Mgmt Util: M-Z, 
5-5 


Process activity statistics 


in Monitor utility, Sys Mgmt Util: M-Z, 1-40 


Processes 


granting identifiers to, Sys Mgmt Util: A-L, 
1-16 
hibernation 
with ATTACH command, Sys Mgmt Util: 
M-Z, 5-13 
switching control of input stream, Sys Mgmt 
Util: M-Z, 5-13 


transferring control from, Sys Mgmt Util: A-L, 


11-5 
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PROCESSES class record 
in Monitor utility, Sys Mgmt Util: M-Z, A-28 
Processor modes statistics 
in Monitor utility, Sys Mgmt Util: M-Z, 1-33 
/PROCESSOR qualifier 
in Mount utility, Sys Mgmt Util: M-Z, 2~29 
Process states statistics 
in Monitor utility, Sys Mgmt Util: M-Z, 1-50 
Process types 
with Accounting utility, Sys Mgmt Util: A-L, 
2-18 
PROCSECTCNT system parameter, Sys Mgmt 
Util: M-Z, C—30 
Profiles, Sys Mgmt Util: M-Z, 5-51 
adjusting, Sys Mgmt Util: M-Z, 5-52 
displaying, Sys Mgmt Util: M-Z, 5-56 
in SYSMAN, Sys Mgmt Util: M-Z, 5-32 
Protection 
and MOUNT command, Sys Mgmt Util: M-Z, 
2-30 
default for foreign volumes, Sys Mgmt Util: 
M-Z, 2-20 
Protection codes 
propagating UIC-based protection in a directory 
tree, Sys Mgmt Util: A-L, 1-11 
/PROTECTION qualifier 
in Backup utility, Sys Mgmt Util: A-L, 7-50 
in Mount utility, Sys Mgmt Util: M-Z, 2-30 
Protocol bit mask 
error definitions, Sys Mgmt Util: A-L, 11-44 
Proxy accounts 
adding, Sys Mgmt Util: A-L, 5-21 
deleting, Sys Mgmt Util: A-—L, 5-40 
modifying, Sys Mgmt Util: A-L, 5-37 
Proxy logins, Sys Mgmt Util: A-L, 5-21, 5-37 
PSEUDOLOA system parameter, Sys Mgmt Util: 
M-Z, C—50 
PURGE command 
in Install utility, Sys Mgmt Util: A-L, 10-16 
PU_OPTIONS system parameter, Sys Mgmt Util: 
M-Z, C-30 


Q 


QBUS_MULT_INTR system parameter, Sys 


Mgmt Util: M-Z, C-50 
QDSKINTERVAL system parameter, Sys Mgmt 
Util: M-Z, C—30 
QDSKVOTES system parameter, Sys Mgmt Util: 
M-Z, C-30 
Qualifiers 
command, Sys Mgmt Util: A-L, 7-7 
input file-selection, Sys Mgmt Util: A-L, 7-7 
input save-set, Sys Mgmt Util: A-L, 7-7 
output file, Sys Mgmt Util: A-L, 7-7 
output save-set, Sys Mgmt Util: A-L, 7-7 
position-dependent, Sys Mgmt Util: A-L, 7-7 
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Qualifiers (cont'd) 

requiring special privileges, Sys Mgmt Util: 
M-Z, 2-7 
QUANTUM system parameter, Sys Mgmt Util: 
M-Z, C-30 

Quota checking 
controlling, Sys Mgmt Util: M-Z, 2-31 

Quota file 
creating, Sys Mgmt Util: M-Z, 5-22 
disabling, Sys Mgmt Util: M-Z, 5-23 
displaying, Sys Mgmt Util: M-Z, 5-28 
enabling, Sys Mgmt Util: M-Z, 5-24 
modifying, Sys Mgmt Util: M-Z, 5-24 
removing an entry, Sys Mgmt Util: M-Z, 5-28, 


5-27 
updating, Sys Mgmt Util: M-Z, 5-26 
/QUOTA qualifier 
in Mount utility, Sys Mgmt Util: M-Z, 2-31 


R 


Range checking 
disabling, Sys Mgmt Util: M-Z, 5-43 
enabling, Sys Mgmt Util: M-Z, 5-44 
/READ_CHECK qualifier, Sys Mgmt Util: A-L, 
3-9 
in Analyze/Disk_Structure utility, Sys Mgmt 
Util: A-L, 3-9 
REALTIME_SPTS system parameter, Sys Mgmt 
Util: M-Z, C-30 
REBOOT phase of AUTOGEN, Sys Mgmt Util: 
A-L, 6-8 
/REBUILD qualifier 
in Mount utility, Sys Mgmt Util: M-Z, 2-32 
RECALL command 
in LATCP, Sys Mgmt Util: A-L, 11-19 
RECNXINTERVAL system parameter, Sys Mgmt 
Util: M-Z, C-30 
Record blocking 
volume mount, Sys Mgmt Util: M-Z, 2-24 
Recording file description 
in Monitor utility, Sys Mgmt Util: M-Z, A-1 
Recording files 
class types, Sys Mgmt Util: M-Z, A-8 
in Monitor utility 
class header, Sys Mgmt Util: M-Z, A-9 
class prefix for component classes, Sys 
Mgmt Util: M-Z, A-10 
class records, Sys Mgmt Util: M-Z, A-8 
data block, Sys Mgmt Util: M-Z, A-11 
Digital control records, Sys Mgmt Util: 
M-Z, A-3 
file header record, Sys Mgmt Util: M-Z, 
A-3 
I/O class record, Sys Mgmt Util: M-Z, 
A-20 
node transition record, Sys Mgmt Util: 
M-Z, A-7 


Recording files 
in Monitor utility (cont’d) 
RMS class record, Sys Mgmt Util: M-Z, 
A-30 
RMS file record, Sys Mgmt Util: M-Z, A-7 
SCS class record, Sys Mgmt Util: M-Z, 
A-36 
system information record, Sys Mgmt Util: 
M-Z, A-5 
/RECORD qualifier 
in Backup utility, Sys Mgmt Util: A-L, 7-51 
in Monitor utility, Sys Mgmt Util: M-Z, 1-13 
Records 
See also Security audit log files 
duplicating, Sys Mgmt Util: A-L, 5-22 
Record size 
See Magnetic tape 
/RECORDSIZE qualifier 
in Mount utility, Sys Mgmt Util: M-Z, 2-33 
Record type 
in Monitor utility, Sys Mgmt Util: M-Z, A-2 
/RECORD_ATTRIBUTES qualifier 
in Analyze/Disk_Structure utility, Sys Mgmt 
Util: A-L, 3-9 
Recovering lost files, Sys Mgmt Util: A-L, 3-4 
REFRESH command 
in LATCP, Sys Mgmt Util: A-L, 11-20 
in Show Cluster utility, Sys Mgmt Util: M-Z, 
3-41 
/RELEASE_TAPE qualifier 
in Backup utility, Sys Mgmt Util: A-L, 7-52 
RELOAD command 
in SYSGEN, Sys Mgmt Util: M-Z, 4-15 
REMOVE (Field) command 
in Show Cluster utility, Sys Mgmt Util: M-Z, 
3-45 
REMOVE CIRCUITS command 
in Show Cluster utility, Sys Mgmt Util: M-Z, 
3-41 
REMOVE CLUSTER command 
in Show Cluster utility, Sys Mgmt Util: M-Z, 
3-42 
REMOVE command 
in Authorize utility, Sys Mgmt Util: A-L, 5-89 
in Install utility, Sys Mgmt Util: A-L, 10-17 
REMOVE CONNECTIONS command 
in Show Cluster utility, Sys Mgmt Util: M-Z, 
3-43 
REMOVE COUNTERS command 
in Show Cluster utility, Sys Mgmt Util: M-Z, 
3-44 
REMOVE CREDITS command 
in Show Cluster utility, Sys Mgmt Util: M-Z, 
3-44 
REMOVE ERRORS command 
in Show Cluster utility, Sys Mgmt Util: M-Z, 
3-45 


REMOVE/IDENTIFIER command 
in Authorize utility, Sys Mgmt Util: A-L, 5-40 
REMOVE LOCAL_PORTS command 
in Show Cluster utility, Sys Mgmt Util: M-Z, 
3-46 
REMOVE MEMBERS command 
in Show Cluster utility, Sys Mgmt Util: M-Z, 
3-47 
REMOVE/PROXY command 
in Authorize utility, Sys Mgmt Util: A-L, 5-40 
REMOVE SYSTEMS command 
in Show Cluster utility, Sys Mgmt Util: M-Z, 
3-47 
RENAME command 
in Authorize utility, Sys Mgmt Util: A-L, 5-41 
RENAME/IDENTIFIER command 
in Authorize utility, Sys Mgmt Util: A-L, 5-48 
REPAIR command 
in LMCP, Sys Mgmt Util: A-L, 12-18 
Repairing errors, Sys Mgmt Util: A-L, 3-3, 3-7, 
3-9, 3-10 
/REPAIR qualifier 
in Analyze/Disk_Structure utility, Sys Mgmt 
Util: A-L, 3-10 
REPLACE command 
in Install utility, Sys Mgmt Util: A-L, 10-18 
/REPLACE qualifier 
in Backup utility, Sys Mgmt Util: A-L, 7-52 
Report format from Audit Analysis utility 
brief, Sys Mgmt Util: A-L, 4—7 
full, Sys Mgmt Util: A-L, 4-10 
summary, Sys Mgmt Util: A-L, 4-26 
Report from SHOW CLUSTER, Sys Mgmt Util: 
M-Z, 3-3 
command to modify, Sys Mgmt Util: M-Z, B-3 
controlling the display, Sys Mgmt Util: M-Z, 
3-4 
default display, Sys Mgmt Util: M-Z, 3-38 
formatting, Sys Mgmt Util: M-Z, 3-53 
organization of, Sys Mgmt Util: M-Z, 3-3 
printing, Sys Mgmt Util: M-Z, 3-56 
time period for, Sys Mgmt Util: M-Z, 3-6, 3-7 
update interval, Sys Mgmt Util: M-Z, 3-8, 
3-55 
Reporting errors, Sys Mgmt Util: A-L, 3-3 
Requirements and limitations, Sys Mgmt Util: 
A-L, 3-6 
RESALLOC system parameter, Sys Mgmt Util: 
M-Z, C-50 
RESHASHTBL system parameter, Sys Mgmt 
Util: M-Z, C-30 
Resource accounting 
programming information, Sys Mgmt Util: 
A-L, C-1 
Resource attributes, Sys Mgmt Util: A-L, 5-19, 
5-28, 5-35 
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Resource use 
producing reports of, Sys Mgmt Util: A-L, 2-9, 
2—11, 2-25 
Restrictions 
in using SYSMAN, Sys Mgmt Util: M-Z, 5-5 
Mount utility, Sys Mgmt Util: M-Z, 2-7 
Retransmit limit, Sys Mgmt Util: A-L, 11-26 
REVOKE/IDENTIFIER command 
in Authorize utility, Sys Mgmt Util: A-L, 5-48 
/REWIND qualifier 
as Backup utility input save-set qualifier, Sys 
Mgmt Util: A-L, 7-53 
as Backup utility output save-set qualifier, Sys 
Mgmt Util: A-L, 7-54 
Rights databases 
See RIGHTSLIST.DAT files 
Rights identifier, Sys Mgmt Util: M-Z, 5-25 
for disk quota file, Sys Mgmt Util: M-Z, 5-20 
RIGHTSLIST.DAT files 
adding identifiers to, Sys Mgmt Util: A-L, 


5-19 

altering identifiers in, Sys Mgmt Util: A-L, 
5~35 

creating and maintaining, Sys Mgmt Util: 
A-L, 5-3, 5-25 

deleting identifiers from, Sys Mgmt Util: A-L, 
5-40 

displaying identifiers in, Sys Mgmt Util: A-L, 
5-47 

displaying records in, Sys Mgmt Util: A-L, 
5-49 

renaming identifiers, Sys Mgmt Util: A-L, 
5-43 


RJOBLIM system parameter, Sys Mgmt Util: 
M-Z, C-30 
RMS statistics 
in Monitor utility, Sys Mgmt Util: M-Z, 1-43 
RMS system parameters 
RMS_DFMBC, Sys Mgmi Util: M-Z, C-31 
RMS_DFMBFHSH, Sys Mgmt Util: M-Z, C-31 
RMS_DFMBFIDX, Sys Mgmt Util: M-Z, C-31 
RMS_DFMBFREL, Sys Mgmi Util: M-Z, C-31 
RMS_DFMBFSDK, Sys Mgmt Util: M-Z, C-31 
RMS_DFMBFSMT, Sys Mgmt Util: M-Z, C-31 
RMS_DFMBFSUR, Sys Mgmt Util: M-Z, C-31 
RMS_DFNBC, Sys Mgmt Util: M-Z, C-31 
RMS_EXTEND_SIZE, Sys Mgmt Util: M-Z, 
C-31 
RMS_FILEPROT, Sys Mgmt Util: M-Z, C-32 
RMS_GBLBUFQUO, Sys Mgmt Util: M-Z, 
C-32 
RMS_PROLOGUE, Sys Mgmt Util: M-Z, C-32 


RSRVPAGCNT system parameter, Sys Mgmt Util: 


M-Z, C-51 
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S 


SO_PAGING system parameter, Sys Mgmt Util: 
M-Z, C-51 
SAVE command 
in Show Cluster utility, Sys Mgmt Util: M-Z, 
38-49 
SAVEDUMP system parameter, Sys Mgmt Util: 
M-Z, C-32 
Save sets 
description of, Sys Mgmt Util: A-L, 7-8 
directing output to, Sys Mgmt Util: A-L, 7-10 
Save-set specification, Sys Mgmt Util: A-L, 7-5 
/SAVE_SET qualifier 
as Backup utility input save-set qualifier, Sys 
Mgmt Util: A-L, 7-57 
as Backup utility output save-set qualifier, Sys 
Mgmt Util: A-L, 7-58 
SAVPARAMS phase of AUTOGEN, Sys Mgmt 
Util: A-L, 6-6 
SA_APP system parameter, Sys Mgmt Util: M-Z, 
C-51 
SBIERRENABLE system parameter, Sys Mgmt 
Util: M-Z, C-51 
SCH_CTLFLAGS system parameter, Sys Mgmt 
Util: M-Z, C-32 
Screens 
refreshing from LATCP, Sys Mgmt Util: A-L, 
11-20 
SCROLL command 
in Show Cluster utility, Sys Mgmt Util: M-Z, 
3-50 
SCROLL keypad function, Sys Mgmt Util: M-Z, 
B-3 
SCS (Systems Communications Service) 
SHOW CLUSTER information, Sys Mgmt Util: 
M-Z, 3-3 
SCSI_LNOAUTO system parameter, Sys Mgmt 
Util: M-Z, C-51 
SCS system parameters 
SC, Sys Mgmt Util: M-Z, C-34 
SCSBUFFCNT, Sys Mgmt Util: M-Z, C-32 
SCSCONNCNT, Sys Mgmt Util: M-Z, C-33 
SCSFLOWCUSH, Sys Mgmt Util: M-Z, C-33 
SCSMAXDG, Sys Mgmt Util: M-Z, C-33 
SCSMAXMSG, Sys Mgmt Util: M-Z, C-33 
SCSNODE, Sys Mgmt Util: M-Z, C-33 
SCSRESPCNT, Sys Mgmt Util: M-Z, C-33 
SCSSYSTEMID, Sys Mgmt Util: M-Z, C-33 
Security Alarm ACEs 


See Alarm ACEs 
Security alarm messages 
specifying access criteria for, Sys Mgmt Util: 
A-L, 1-6, 1-8 


Security archive files 
analyzing, Sys Mgmt Util: A-L, 4-4 
Security Audit ACEs 


See Audit ACEs 
Security audit data packets 
fields, Sys Mgmt Util: A-L, F—7, G-5 
format, Sys Mgmt Util: A-L, F-6, G-4 
Security audit event flags, Sys Mgmt Util: A-L, 
F-6 
Security audit event messages 
data packets in, Sys Mgmt Util: A-L, F-6 
event flags, Sys Mgmt Util: A-L, F-6 
format, Sys Mgmt Util: A-L, F-1, G-1 
subtypes for events, Sys Mgmt Util: A-L, F-2 
types of events, Sys Mgmt Util: A-L, F-2 
Security audit header packets, Sys Mgmt Util: 
A-L, F-2 
fields, Sys Mgmt Util: A-L, G-1 
format, Sys Mgmt Util: A-L, G-1 
Security audit log files 
advancing to next record, Sys Mgmt Util: A-L, 
4-33 
analyzing, Sys Mgmt Util: A-L, 4—4 
data packet format, Sys Mgmt Util: A-L, F-6, 
G4 
displaying records, Sys Mgmt Util: A-L, 4-29 
displaying the full record, Sys Mgmt Util: A-L, 


4—10 

excluding information from reports, Sys Mgmt 
Util: A-L, 4-10 

header packet format, Sys Mgmt Util: A-L, 
F-1, G-1 

opening new input file, Sys Mgmi Util: A-L, 
4-32 

resuming processing, Sys Mgmt Util: A-L, 
4-29 

returning to previous record, Sys Mgmt Util: 
A-L, 4-83 


selecting records by event class, Sys Mgmt 
Util: A-L, 4-7, 4-8 
selecting records by time, Sys Mgmt Util: A-L, 
4-5, 4-26 
specifying duration of record display, Sys 
Mgmt Util: A-L, 4-12 
writing alarm messages to, Sys Mgmt Util: 
A-L, 1-8 
Security audit records 
criteria for selecting, Sys Mgmt Util: A-L, 
4-13, 4-17 
Security audit reports, Sys Mgmt Util: A-L, 4-3 
to 4—34 
advancing the display, Sys Mgmt Util: A-L, 
4-33 
binary output, Sys Mgmt Util: A-L, 4-6 
brief format, Sys Mgmt Util: A-L, 4-7 
creating, Sys Mgmi Util: A-L, 4-4 
directing output, Sys Mgmt Util: A-L, 4-12 


Security audit reports (cont'd) 
displaying selection criteria, Sys Mgmt Util: 
A-L, 4-34 
duration of record display, Sys Mgmt Util: 
A-L, 4-12 
excluding information, Sys Mgmt Util: A-L, 
4-10 
full format, Sys Mgmt Util: A-L, 4-10 
interrupting the display, Sys Mgmt Util: A-L, 
4-29 
modifying selection criteria, Sys Mgmt Util: 
A-L, 4-29 
processing additional log files, Sys Mgmt Util: 
A-L, 4-32 
resuming the processing, Sys Mgmt Util: A-L, 
4-29 
summary of records, Sys Mgmt Util: A-L, 4—26 
Security event classes 
extracting audit records by, Sys Mgmt Util: 
A-L, 4-7, 4-8 
Security event messages 
extracting from log files, Sys Mgmt Util: A-L, 
4-4 
Security objects 
classes, Sys Mgmt Util: A-L, 1-4 
Security operators 
sending alarm messages to audit log files, Sys 
Mgmt Util: A-L, 1-8 
sending alarm messages to terminals, Sys 
Mgmt Util: A-L, 1-6 
SECURITY_POLICY system parameter, Sys 
Mgmt Util: M-Z, C-34 
SELECT command 
in Show Cluster utility, Sys Mgmt Util: M-Z, 
3-51 
/SELECT qualifier 
in Backup utility, Sys Mgmt Util: A-L, 7-58 
Server 
MSCP, Sys Mgmt Util: M-Z, 4-15 
Service node, Sys Mgmt Util: A-L, 11-3 
controlling access to, Sys Mgmt Util: A-L, 
11-24, 11-29 
deleting a port, Sys Mgmt Util: A-L, 11-17 
modifying characteristics of, Sys Mgmt Util: 
A-L, 11-22, 11-34 
naming, Sys Mgmt Util: A-L, 11-32 
service announcements, Sys Mgmt Util: A-L, 
11-25, 11-26 
Services 
application, Sys Mgmt Util: A-L, 11-9, 11-12, 
11-13, 11-31, 11-34 
creating with LATCP, Sys Mgmt Util: A-L, 
11-12 
database, Sys Mgmt Util: A-L, 11-26, 11-29 
deleting with LATCP, Sys Mgmt Util: A-L, 
11-18 
displaying characteristics of, Sys Mgmt Util: 
A-L, 11-50 
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Services (cont'd) 

displaying counters, Sys Mgmt Util: A-L, 
11-50 

displaying information using LATCP, Sys 
Mgmt Util: A-L, 11-49 

general timesharing, Sys Mgmt Util: A-L, 
11-13 

identifier, Sys Mgmt Util: A-L, 11-12, 11-25, 
11-34 

limiting size of node database, Sys Mgmt Util: 
A-L, 11-26, 11-29 

modifying characteristics of, Sys Mgmt Util: 


A-L, 11-34 

naming with LATCP, Sys Mgmt Util: A-L, 
11-12, 11-21 

rating, Sys Mgmt Util: A-L, 11-12, 11-35, 
11-45, 11-50 


responder, Sys Mgmt Util: A-L, 11-26 
target, Sys Mgmt Util: A-L, 11-49 
Session limit, Sys Mgmt Util: A-L, 11-27 
Sessions 
terminating, Sys Mgmt Util: A-L, 3-6 
SET AUDIT command 
recording alarm messages, Sys Mgmt Util: 
A-L, 1-8 
SET AUTO_POSITIONING command 
in Show Cluster utility, Sys Mgmt Util: M-Z, 
3-52 
SET command 
(Field), Sys Mgmt Util: M-Z, 3-53 
in SYSGEN, Sys Mgmt Util: M-Z, 4-16 
SET DEFAULT command, Sys Mgmt Util: M-Z, 
1-62 
in Monitor utility, Sys Mgmt Util: M-Z, 1-62 
SET ENVIRONMENT command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-51 
SET FUNCTION command, Sys Mgmt Util: M-Z, 
B-3 
in Show Cluster utility, Sys Mgmt Util: M-Z, 
3-54 
SET INTERVAL command 
in Show Cluster utility, Sys Mgmt Util: M-Z, 
3-55 
SET LINK command 
in LATCP, Sys Mgmt Util: A-L, 11-21 
SET NODE command 
in LATCP, Sys Mgmt Util: A-L, 11-22 
SET/OUTPUT command 
in SYSGEN, Sys Mgmt Util: M-Z, 4-17 
SETPARAMS.DAT file, Sys Mgmt Util: A-L, 6-6, 
6-7 
SETPARAMS phase of AUTOGEN, Sys Mgmt 
Util: A-L, 6-7 
SET PORT command 
in LATCP, Sys Mgmt Util: A-L, 11-31 
SET PROFILE command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-52 
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SET QUORUM command 
avoiding use of /CLUSTER with SYSMAN DO 
command, Sys Mgmt Util: M-Z, 5-30 
SET SCREEN command 
in Show Cluster utility, Sys Mgmt Util: M-Z, 
38-55 
SET SECURITY command 
/CLASS qualifier, Sys Mgmt Util: A-L, 1-5 
specifying object class, Sys Mgmt Util: A-L, 
1-5 
SET SECURITY/EDIT command, Sys Mgmt Util: 
A-L, 1-5, 1-18 
SET SERVICE command 
in LATCP, Sys Mgmt Util: A-L, 11-34 
SET/STARTUP command 
in SYSGEN, Sys Mgmt Util: M-Z, 4-17 
SET TIMEOUT command, Sys Mgmt Util: M-Z, 
5-53 
in SYSMAN, Sys Mgmt Util: M-Z, 5-53 
SETTIME system parameter, Sys Mgmt Util: 
M-Z, C-34 
Setting page, swap, and dump file sizes, Sys 
Mgmt Util: A-L, 6-3 
Setting system parameters 
recommended method, Sys Mgmt Util: A-L, 
6-3 
SHADOWING system parameter, Sys Mgmt Util: 
M-Z, C-34 
/SHADOW qualifier 
in Mount utility, Sys Mgmt Util: M-Z, 2-34 
SHADOW_MAX_COPY system parameter, Sys 
Mgmt Util: M-Z, C—35 
SHADOW_MBR_TMO system parameter, Sys 
Mgmt Util: M-Z, C-85 
SHADOW_SYS_DISK system parameter, Sys 
Memt Util: M-Z, C-35 
SHADOW_SYS_UNIT system parameter, Sys 
Mgmt Util: M-Z, C-36 
SHARE command 
in SYSGEN, Sys Mgmt Util: M-Z, 4-18 
SHARE/INITIALIZE command 
in SYSGEN, Sys Mgmt Util: M-Z, 4-19 
/SHARE qualifier 
in Mount utility, Sys Mgmt Util: M-Z, 2-34 
SHOW/ADAPTER command 
in SYSGEN, Sys Mgmt Util: M-Z, 4-25 
SHOW/BUS command 
in SYSGEN, Sys Mgmt Util: M-Z, 4-25 
SHOW CLUSTER command 
in Show Cluster utility, Sys Mgmt Util: M-Z, 
3-5 
Show Cluster utility (SHOW CLUSTER) 
See also Report from SHOW CLUSTER 
activation time, Sys Mgmt Util: M-Z, 3-6, 3-7, 
3-8, 3-55 
classes of data, Sys Mgmt Util: M-Z, 3-3 
commands, Sys Mgmt Util: M-Z, 3-10 


Show Cluster utility (SHOW CLUSTER) (cont'd) 

continuous mode, Sys Mgmt Util: M-Z, 3-5, 
3-7 

controlling the display, Sys Mgmt Util: M-Z, 
3-4 

data fields, Sys Mgmt Util: M-Z, 3-3 

defining arrow keys, Sys Mgmt Util: M-Z, B-3 

defining keypad keys, Sys Mgmt Util: M-Z, 
3-34, B-3 

deselecting window, Sys Mgmt Util: M-Z, 3-36 

directing output, Sys Mgmt Util: M-Z, 3-5 

Execute Procedure (@) command, Sys Mgmt 
Util: M-Z, 3-12 

exiting, Sys Mgmt Util: M-Z, 3-5, 3-37 

invoking, Sys Mgmt Util: M-Z, 3-5 

keypad, Sys Mgmt Util: M-Z, B-1 

moving display window, Sys Mgmt Util: M-Z, 
3-38, 3-51 

panning display window, Sys Mgmt Util: M-Z, 
3-40 

qualifiers, Sys Mgmt Util: M-Z, 3-6 

refreshing the display, Sys Mgmt Util: M-Z, 
3-41 

removing display information, Sys Mgmt Util: 
M-Z, 3-41 to 3-47 

resetting display information, Sys Mgmt Util: 
M-Z, 3-38 

sample display, Sys Mgmt Util: M-Z, 3-3 

scrolling display window, Sys Mgmt Util: M-Z, 


38-40, 3-51 
selecting display fields, Sys Mgmt Util: M-Z, 

3-20 

CIRCUITS class, Sys Mgmt Util: M-Z, 
3-12 

CLUSTER class, Sys Mgmt Util: M-Z, 
3-14 

CONNECTIONS class, Sys Mgmt Util: 
M-Z, 3-15 

COUNTERS class, Sys Mgmt Util: M-Z, 
3-16 

CREDITS class, Sys Mgmt Util: M-Z, 
3-18 


ERRORS class, Sys Mgmt Util: M-Z, 3-19 
LOCAL_PORTS class, Sys Mgmt Util: 
M-Z, 3-29 
MEMBERS class, Sys Mgmt Util: M-Z, 
3-31 
SYSTEMS class, Sys Mgmt Util: M-Z, 
3-32 
selecting display window, Sys Mgmt Util: M-Z, 
3-51 
SHOW command 
in Audit Analysis utility, Sys Mgmt Util: A-L, 
4—34 
in Authorize utility, Sys Mgmt Util: A-L, 5-44 
in CLUE, Sys Mgmt Util: A-L, 8-8 


SHOW/CONFIGURATION command 
in SYSGEN, Sys Mgmt Util: M-Z, 4—26 
SHOW DEFAULT command 
in Monitor utility, Sys Mgmt Util: M-Z, 1-63 
SHOW/DEVICE command 
in SYSGEN, Sys Mgmt Util: M-Z, 4—28 
SHOW/DRIVER command 
in SYSGEN, Sys Mgmt Util: M-Z, 4-29 
SHOW ENVIRONMENT command, Sys Mgmt 
Util: M-Z, 5-51, 5-54 
in SYSMAN, Sys Mgmt Util: M-Z, 5-54 
SHOW/IDENTIFIER command 
in Authorize utility, Sys Mgmt Util: A-L, 5-47 
SHOW KEY command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-55 
SHOW LINK command 
in LATCP, Sys Mgmt Util: A-L, 11-35 
SHOW LOG command 
in LMCP, Sys Mgmt Util: A-L, 12-16 
SHOW NODE command 
in LATCP, Sys Mgmt Util: A-L, 11-41 
SHOW PORT command 
in LATCP, Sys Mgmt Util: A-L, 11-46 
SHOW PROFILE command, Sys Mgmt Util: M-Z, 
5-56 
in SYSMAN, Sys Mgmt Util: M-Z, 5-56 
SHOW/PROXY command 
in Authorize utility, Sys Mgmt Util: A-L, 5-49 
SHOW/RIGHTS command 
in Authorize utility, Sys Mgmt Util: A-L, 5-49 
SHOW SERVICE command 
in LATCP, Sys Mgmt Util: A-L, 11-49 
SHOW/STARTUP, Sys Mgmt Util: M-Z, 4-30 
SHOW TIME command 
in SYSMAN, Sys Mgmi Util: M-Z, 5-57 
SHOW TIMEOUT command, Sys Mgmt Util: 
M-Z, 5-57 
SHOW/TURBOCHANNEL command 
in SYSGEN, Sys Mgmt Util: M-Z, 4-30 
SHOW/UNIBUS command 
in SYSGEN, Sys Mgmt Util: M-Z, 4-31 
SHOW [parameter] command 
in SYSGEN, Sys Mgmt Util: M-Z, 4-20 
SHOW_CLUSTERSINIT, Sys Mgmt Util: M-Z, 
3-12 
SHUTDOWN NODE command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-57 
SHUTDOWN phase of AUTOGEN, Sys Mgmt 
Util: A-L, 6-7 
/SINCE qualifier 
in Backup utility, Sys Mgmt Util: A—L, 7-59 
SMP_CPUSH system parameter, Sys Mgmt Util: 
M-Z, C-51 
SMP_CPUS system parameter, Sys Mgmt Util: 
M-Z, C-36 
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SMP_LNGSPINWAIT system parameter, Sys 
Mgmt Util: M-Z, C-36 
SMP_SANITY_CNT system parameter, Sys Mgmt 
Util: M-Z, C-36 
SMP_SPINWAIT system parameter, Sys Mgmt 
Util: M-Z, C-36 
SMP_TICK_CNT system parameter, Sys Mgmt 
Util: M-Z, C-51 
Software device, Sys Mgmt Util: M-Z, 4-11 
SPAWN command 
and ATTACH command, Sys Mgmt Util: M-Z, 
5-13 
in LATCP, Sys Mgmt Util: A-L, 11-51 
in SYSMAN, Sys Mgmt Util: M-Z, 5-60 
SPTREQ system parameter, Sys Mgmt Util: M-Z, 
C-37 
SSINHIBIT system parameter, Sys Mgmt Util: 
M-Z, C-51 
Stage checks, Sys Mgmt Util: A-L, D-1 
Standalone BACKUP, Sys Mgmt Util: A-L, 7-10 
Start phase of AUTOGEN, Sys Mgmt Util: A-L, 
6-5 
default, Sys Mgmt Util: A-L, 6-10 
Startup 
database 
adding a file, Sys Mgmt Util: M-Z, 5-63 
deleting a file, Sys Mgmt Util: M-Z, 5-68 


disabling a file, Sys Mgmt Util: M-Z, 5-65" 


enabling a file, Sys Mgmt Util: M-Z, 5-66 
establishing, Sys Mgmt Util: M-Z, 5-69 
modifying a file, Sys Mgmt Util: M-Z, 
5-67 
setting the default, Sys Mgmt Util: M-Z, 
5-69 
logging, Sys Mgmt Util: M-Z, 5-70 
phase, Sys Mgmt Util: M-Z, 5-64 
procedure 
setting the name, Sys Mgmt Util: M-Z, 
5-45 
status, Sys Mgmt Util: M-Z, 5-70 
STARTUP$STARTUP_LAYERED, Sys Mgmt Util: 
M-Z, 5-69 
STARTUP$STARTUP_VMS, Sys Mgmt Util: 
M-Z, 5-69 
STARTUP ADD command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-63 
Startup command procedure, Sys Mgmt Util: 
M-Z, 4-17, 4-32, 4-33 
site-independent file name, Sys Mgmt Util: 
M-Z, 4-30 
STARTUP DISABLE command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-65 
STARTUP ENABLE command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-66 
STARTUP MODIFY command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-67 
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STARTUP REMOVE command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-68 
STARTUP SET DATABASE command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-69 
STARTUP SET OPTIONS command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-70 
STARTUP SHOW command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-71 
STARTUP_Pn system parameters, Sys Mgmt Util: 
M-Z, C-37 
in SYSMAN, Sys Mgmt Util: M-Z, 5-64 
STATES class record 
in Monitor utility, Sys Mgmt Util: M-Z, A-88 
Static service rating, Sys Mgmt Util: A-L, 11-12, 
11-35 
displaying, Sys Mgmt Util: A-L, 11-45, 11-50 
Subprocesses 
See also SPAWN command 
creating from LATCP, Sys Mgmt Util: A-L, 
11-5, 11-51 
creating with SPAWN command, Sys Mgmt 
Util: M-Z, 5-60 
switching control of input stream to, Sys Mgmt 
Util: M-Z, 5-138 
Subsystem ACEs, Sys Mgmt Util: A-L, 1-16 
example, Sys Mgmt Util: A-—L, 1-16 
specifying identifier characteristics, Sys Mgmt 
Util: A-L, 1-17 
specifying identifiers, Sys Mgmt Util: A-L, 
1-17 
Subsystem attributes, Sys Mgmt Util: A-L, 5-19, 
5-28, 5-36 
/SUBSYSTEM qualifier 
in Mount utility, Sys Mgmt Util: M-Z, 2-35 
Subsystems 
controlling access to, Sys Mgmt Util: A-L, 
1-16 
/SUMMARY qualifier 
in Monitor utility, Sys Mgmt Util: M-Z, 1-13 
SWAPFILE.SYS file 
See Swap files 
Swap files 
changing size, Sys Mgmt Util: A-L, 6-3 
displaying the size calculated by AUTOGEN, 
Sys Mgmt Util: A-L, 6-7 
generating a new file sized by AUTOGEN, Sys 
Mgmt Util: A-L, 6-7 
SWPALLOCINC system parameter, Sys Mgmt 
Util: M-Z, C-51 
SWPEAIL system parameter, Sys Mgmt Util: 
M-Z, C-51 
SWPFILCNT system parameter, Sys Mgmt Util: 
M-Z, C-37 
SWPOUTPGCNT system parameter, Sys Mgmt 
Util: M-Z, C-37 


SWPRATE system parameter, Sys Mgmt Util: 
M-Z, C-52 
SWP_PRIO system parameter, Sys Mgmt Util: 
M-Z, C-51 
Symbol table 
command interpreter, Sys Mgmt Util: M-Z, 
C-10 
Syntax 
of BACKUP commands, Sys Mgmt Util: A-L, 
7-4 
SYS$SYSTEM:STARTUP.COM command 
procedure, Sys Mgmt Util: M-Z, D-6 
SYSALF.DAT database 
in SYSMAN, Sys Mgmt Util: M-Z, 5-11 
SYSBOOT facility 
using during bootstrap operations, Sys Mgmt 
Util: M-Z, 4-3 
SYSDUMP.DMP file 
See also Dump files 
SYSGEN 
See System Generation utility (SYSGEN) 
SYSLOST.DIR, Sys Mgmt Util: A-L, 3-4 
SYSMAN 
See System Management utility (SYSMAN) 
SYSMANINI 
changing file specification, Sys Mgmt Util: 
M-Z, 5-4 
SYSMWCNT system parameter, Sys Mgmi Util: 
M-Z, C-37 
SYSPFC system parameter, Sys Mgmt Util: M-Z, 
C-52 
SYSTEM class record 
in Monitor utility, Sys Mgmt Util: M-Z, A-40 
System communication services statistics 
in Monitor utility, Sys Mgmt Util: M-Z, 1-47 
System Generation utility (SYSGEN), Sys Mgmt 
Util: M-Z, 4-3 
assign parameter values, Sys Mgmt Util: M-Z, 
4-16 
commands 
AUTOCONFIGURE, Sys Mgmt Util: M-Z, 
4—5 
CONFIGURE, Sys Mgmt Util: M-Z, 4-7 
CONNECT/ADAPTER, Sys Mgmt Util: 
M-Z, 4-9 


CONNECT/NOADAPTER, Sys Mgmt Util: 


M-Z, 4-11 
CREATE, Sys Mgmt Util: M-Z, 4-12 
DEINSTALL, Sys Mgmt Util: M-Z, 4-13 
DISABLE, Sys Mgmt Util: M-Z, 4-14 
ENABLE, Sys Mgmt Util: M-Z, 4-14 
INSTALL, Sys Mgmt Util: M-Z, 4-11 
LOAD, Sys Mgmt Util: M-Z, 4-14 
MSCP, Sys Mgmt Util: M-Z, 4-15 
RELOAD, Sys Mgmt Util: M-Z, 4-15 
SET, Sys Mgmt Util: M-Z, 4-16 
SET/OUTPUT, Sys Mgmt Util: M-Z, 4-17 


System Generation utility (SYSGEN) 
commands (cont'd) 

SET/STARTUP, Sys Mgmt Util: M-Z, 
4—17 

SHARE, Sys Mgmt Util: M-Z, 4-18 

SHARE/INITIALIZE, Sys Mgmt Util: 
M-Z, 4-19 

SHOW, Sys Mgmt Util: M-Z, 4-20 

SHOW/ADAPTER, Sys Mgmt Util: M-Z, 
4-25 

SHOW/BUS, Sys Mgmt Util: M-Z, 4-25 

SHOW/CONFIGURATION, Sys Mgmt 
Util: M-Z, 4—26 

SHOW/DEVICE, Sys Mgmt Util: M-Z, 
4—28 

SHOW/DRIVER, Sys Mgmt Util: M-Z, 
4-29 

SHOW/STARTUP, Sys Mgmt Util: M-Z, 
4-30 

SHOW/TURBOCHANNEL, Sys Mgmt Util: 
M-Z, 4-30 

SHOW/UNIBUS, Sys Mgmt Util: M-Z, 
4-31 

TERMINAL, Sys Mgmt Util: M-Z, 4-32 

USE, Sys Mgmt Util: M-Z, 4-83 

WRITE, Sys Mgmt Util: M-Z, 4-84 

showing parameter values, Sys Mgmt Util: 


M-Z, 4-20 
work area, Sys Mgmt Util: M-Z, 4-16, 4-33, 
4-34 


System loadable image 
adding, Sys Mgmt Util: M-Z, 5-72 
removing, Sys Mgmt Util: M-Z, 5-74 
System management 
creating disk quota files, Sys Mgmt Util: M-Z, 
5-22 
defining target system, Sys Mgmt Util: M-Z, 
5-51 
displaying target environment, Sys Mgmt Util: 
M-Z, 5-54 
displaying user profile, Sys Mgmt Util: M-Z, 
5-56 
displaying wait time for node response, Sys 
Mgmt Util: M-Z, 5-57 
limiting response time, Sys Mgmt Util: M-Z, 
5-53 
setting wait time for node response, Sys Mgmt 
Util: M-Z, 5-53 
startup procedures 
See Startup database 
SYSMAN tasks, Sys Mgmt Util: M-Z, 5-8 
System management environment 
See Management environment 
System Management utility (SYSMAN) 
commands 
ALF ADD, Sys Mgmt Util: M-Z, 5-10 
ALF REMOVE, Sys Mgmt Util: M-Z, 5-11 
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System Management utility (SYSMAN) 
commands (cont’d) 


ALF SHOW, Sys Mgmt Util: M-Z, 5-12 

ATTACH, Sys Mgmt Util: M-Z, 5-13 

CONFIGURATION SET CLUSTER_AUTH, 
Sys Mgmt Util: M-Z, 5-14 

CONFIGURATION SET TIME, Sys Mgmt 
Util: M-Z, 5-15 

CONFIGURATION SHOW CLUSTER_ 
AUTHORIZATION, Sys Mgmt Util: 
M-Z, 5-16 

CONFIGURATION SHOW TIME, Sys 
Mgmt Util: M-Z, 5-17 

DISKQUOTA ADD, Sys Mgmt Util: M-Z, 
5-20 

DISKQUOTA CREATE, Sys Mgmt Util: 
M-Z, 5-21 

DISKQUOTA DELETE, Sys Mgmt Util: 
M-Z, 5-23 

DISKQUOTA DISABLE, Sys Mgmt Util: 
M-Z, 5-23 

DISKQUOTA ENABLE, Sys Mgmt Util: 
M-Z, 5-24 

DISKQUOTA MODIFY, Sys Mgmt Util: 
M-Z, 5-24 

DISKQUOTA REBUILD, Sys Mgmt Util: 
M-Z, 5-26 

DISKQUOTA REMOVE, Sys Mgmt Util: 
M-Z, 5-27 

DISKQUOTA SHOW, Sys Mgmt Util: 
M-Z, 5-28 

DO, Sys Mgmt Util: M-Z, 5-29 

EXITx, Sys Mgmt Util: M-Z, 5-32 

HELPx, Sys Mgmt Util: M-Z, 5-32 

I0 AUTOCONFIGURE, Sys Mgmt Util: 
M-Z, 5-33 

IO CONNECT, Sys Mgmt Util: M-Z, 5-34 

IO LOAD, Sys Mgmt Util: M-Z, 5-37 

IO SET PREFIX, Sys Mgmt Util: M-Z, 
5-37 

IO SHOW BUS, Sys Mgmt Util: M-Z, 
5-38 

IO SHOW DEVICE, Sys Mgmt Util: M-Z, 
5-39 

IO SHOW PREFIX, Sys Mgmt Util: M-Z, 
5-40 

LICENSE LOAD, Sys Mgmt Util: M-Z, 
5-41 

LICENSE UNLOAD, Sys Mgmt Util: M-Z, 
5-42 

PARAMETERS DISABLE CHECKS, Sys 
Mgmt Util: M-Z, 5-48 

PARAMETERS ENABLE CHECKS, Sys 
Mgmt Util: M-Z, 5-44 

PARAMETERS SET, Sys Mgmt Util: M-Z, 
5-44 

PARAMETERS SHOW, Sys Mgmt Util: 
M-Z, 5-45 
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System Management utility (SYSMAN) 
commands (cont’d) 
PARAMETERS USE, Sys Mgmt Util: 


M-Z, 5-49 

PARAMETERS WRITE, Sys Mgmt Util: 
M-Z, 5-50 

SET ENVIRONMENT, Sys Mgmt Util: 
M-Z, 5-51 


SET PROFILE, Sys Mgmt Util: M-Z, 5-52 

SET TIMEOUT, Sys Mgmt Util: M-Z, 
5-53 

SHOW ENVIRONMENT, Sys Mgmt Util: 
M-Z, 5-54 

SHOW KEY, Sys Mgmt Util: M-Z, 5-55 

SHOW PROFILE, Sys Mgmt Util: M-Z, 
5-56 

SHOW TIME, Sys Mgmt Util: M-Z, 5-57 

SHUTDOWN NODE, Sys Mgmt Util: 
M-Z, 5-57 

SPAWN, Sys Mgmt Util: M-Z, 5-60 

STARTUP ADD, Sys Mgmt Util: M-Z, 


5-63 

STARTUP DISABLE, Sys Mgmt Util: 
M-Z, 5-65 

STARTUP ENABLE, Sys Mgmt Util: M-Z, 
5-66 

STARTUP MODIFY, Sys Mgmt Util: M-Z, 
5-67 : 

STARTUP REMOVE, Sys Mgmt Util: 
M-Z, 5-68 

STARTUP SET DATABASE, Sys Mgmt 
Util: M-Z, 5-69 

STARTUP SET OPTIONS, Sys Mgmt Util: 
M-Z, 5-70 

STARTUP SHOW, Sys Mgmi Util: M-Z, 
5-71 

SYS_LOADABLE ADD, Sys Mgmt Util: 
M-Z, 5-72 

SYS_LOADABLE REMOVE, Sys Mgmt 
Util: M-Z, 5-74 


common tasks, Sys Mgmt Util: M-Z, 5-3 
executing a command procedure, Sys Mgmt 
Util: M-Z, 5-9 
executing SYSMAN commands, Sys Mgmt Util: 
M-Z, 5-4 
exiting from, Sys Mgmt Util: M-Z, 5-5 
initialization file, Sys Mgmt Util: M-Z, 5-4 
invoking, Sys Mgmt Util: M-Z, 5-5 
overview, Sys Mgmt Util: M-Z, 5-3 
privilege requirements, Sys Mgmt Util: M-Z, 
5-5 
restrictions, Sys Mgmt Util: M-Z, 5-5 
System overview statistics 
in Monitor utility, Sys Mgmt Util: M-Z, 1-53 
System parameters 
See also AUTOGEN command procedure 
ACP, Sys Mgmt Util: M-Z, C-6 to C-9 


System parameters (cont’d) 

affected by AUTOGEN calculations, Sys Mgmt 
Util: A-L, 6-4 

affected by AUTOGEN feedback, Sys Mgmt 
Util: A-L, 6-5 

categories, Sys Mgmt Util: M-Z, C-1 

changing 
recommended method, Sys Mgmt Util: 

A-L, 6-3 
checking, Sys Mgmt Util: M-Z, 5-44 


checking AUTOGEN’s settings, Sys Mgmt Util: 


A-L, 6-3 
default parameter file, Sys Mgmt Util: A-L, 
6-5, 6-7 
descriptions, Sys Mgmt Util: M-Z, C-5 to 
C-52 
disabling checking, Sys Mgmt Util: M-Z, 5-48 
displaying, Sys Mgmt Util: M-Z, 5-45 
device configuration, Sys Mgmt Util: M-Z, 


4—26 

device driver addresses, Sys Mgmt Util: 
M-Z, 4-29 

VO subsystems, Sys Mgmt Util: M-Z, 
4-28 

parameter values, Sys Mgmt Util: M-Z, 
4-20 

startup procedure, Sys Mgmt Util: M-Z, 
4-30 

UNIBUS I/O addresses, Sys Mgmt Util: 
M-Z, 4-31 

displaying values, Sys Mgmt Util: M-Z, 4—20 


file 
See Parameter Files 
Login security, Sys Mgmt Util: M-Z, C-16 to 
C-17 
modifying, Sys Mgmt Util: M-Z, 5-50 
recommended method, Sys Mgmt Util: 
A-L, 6-3 
Process limits and quotas, Sys Mgmt Util: 
M-Z, C-27 to C-29 
RMS, Sys Mgmt Util: M-Z, C-31 to C-82 
setting, Sys Mgmt Util: M-Z, 5-44 
parameter addresses, Sys Mgmt Util: 
M-Z, 4-16 
parameter values, Sys Mgmt Util: M-Z, 
4-3, 4-16, 4-20, 4-33, 4-34 
recommended method, Sys Mgmt Util: 
A-L, 6-3 
sharing multiport memory, Sys Mgmi Util: 
M-Z, 4-18 . 
showing, Sys Mgmt Util: M-Z, 4-20 
specifying startup procedure, Sys Mgmt Util: 
M-Z, 4-17, 4-83, 4-34 
summary, Sys Mgmt Util: M-Z, C-2 
System communication services, Sys Mgmt 
Util: M-Z, C-32 to C-34 
terminal behavior, Sys Mgmt Util: M-Z, C-39 
to C-43 


System parameters (cont'd) 
VCC_FLAGS, Sys Mgmt Util: M-Z, C—45 
VCC_MAXSIZE, Sys Mgmt Util: M-Z, C-45 
VMS, Sys Mgmt Util: M-Z, C-52 
work area, Sys Mgmi Util: M-Z, 5-49, 5-50 
writing contents of, Sys Mgmt Util: M-Z, 5-50 
writing to file, Sys Mgmt Util: M-Z, 4~84 
System passwords, Sys Mgmt Util: A-L, 5-38 
/SYSTEM qualifier 
in Mount utility, Sys Mgmt Util: M-Z, 2-35 
SYSTEMS class 
adding or restoring, Sys Mgmt Util: M-Z, 3-32 
fields belonging to, Sys Mgmt Util: M-Z, 3-28 
removing, Sys Mgmt Util: M-Z, 3-47 
Systems communications services 
See SCS, Sys Mgmt Util: M-Z, 3-38 
System shutdown 
to install changed system parameters, Sys 
Mgmt Util: A-L, 6-7, 6-8 
System time 
setting, Sys Mgmt Util: M-Z, 5-15 
SYSUAFs (system user authorization files) 
creating, Sys Mgmt Util: A-L, 5-3 
default directory entry, Sys Mgmt Util: A-L, 
5-16 
default values, Sys Mgmt Util: A-L, 5-16 
displaying records in, Sys Mgmt Util: A-L, 
5-44 
modifying, Sys Mgmt Util: A-L, 5-3 
recreating, Sys Mgmt Util: A-L, 5-3 
renaming records, Sys Mgmt Util: A-L, 5-41 
SYSUAFs logical name 
defining, Sys Mgmt Util: A-L, 5-4 
SYS_LOADABLE ADD command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-72 
SYS_LOADABLE REMOVE command 
in SYSMAN, Sys Mgmt Util: M-Z, 5-74 


T 


TAILORED system parameter, Sys Mgmt Util: 
M-Z, C-38 
Tape drive 
using /MEDIA_FORMAT qualifier, Sys Mgmt 
Util: A-L, 7-45 
TAPE_ALLOCLASS system parameter, Sys Mgmt 
Util: M-Z, C-38 
/TAPE_EXPIRATION qualifier 
in Backup utility, Sys Mgmt Util: A-L, 7-60 
TAPE_MVTIMEOUT system parameter, Sys 
Mgmt Util: M-Z, C-38 
Target node name, Sys Mgmt Util: A-L, 11-49 
Target port name, Sys Mgmt Util: A-L, 11-49 
Target service name, Sys Mgmt Util: A-L, 11-49 
TBSKIPWSL system parameter, Sys Mgmt Util: 
M-Z, C-52 
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TERMINAL command 
in SYSGEN, Sys Mgmt Util: M-Z, 4-32 
Terminals 
modifying control-key echo strings, Sys Mgmt 
Util: M-Z, 4-32 
sending alarm messages to, Sys Mgmt Util: 
. A-L, 1-6 
Terminating a session, Sys Mgmt Util: A-L, 3-6 
TESTFILES phase of AUTOGEN, Sys Mgmt Util: 
A-L, 6-7 
Time 
See also SYSMAN command CONFIGURATION 
SHOW TIME 
extracting records by, Sys Mgmt Util: A-L, 4-5 
setting system, Sys Mgmt Util: M-Z, 5-15 
updating in a VMScluster, Sys Mgmt Util: 
M-Z, 5-16 
VMScluster 
displaying, Sys Mgmt Util: M-Z, 5-17 
Timeout period 
displaying, Sys Mgmt Util: M-Z, 5-57 
setting, Sys Mgmt Util: M-Z, 5-53 
TIMEPROMPTWAIT system parameter, Sys 
Mgmt Util: M-Z, C-38 
Timer 
for circuits, Sys Mgmt Util: A-L, 11-22 
for multicast message in LAT environment, 
Sys Mgmt Util: A-L, 11-26 
setting in a LAT environment, Sys Mgmt Util: 
A-L, 11-25 
TIME_CONTROL system parameter, Sys Mgmt 
Util: M-Z, C-38 
TIMVCFAIL system parameter, Sys Mgmt Util: 
M-Z, C-38 
TMSCP_LOAD system parameter, Sys Mgmt Util: 
M-Z, C-39 
TRANSACTION class record 
in Monitor utility, Sys Mgmt Util: M-Z, A-41 
Transactions 
monitoring, Sys Mgmt Util: M-Z, 1-57 
TR numbers 
display on AXP systems, Sys Mgmt Util: M-Z, 
5-38 
/TRUNCATE qualifier 
in Backup utility, Sys Mgmt Util: A-L, 7-61 
TTY system parameters 
TTY_ALTALARM, Sys Mgmt Util: M-Z, C-39 
TTY_ALTYPAHD, Sys Mgmt Util: M-Z, C-39 
TTY_AUTOCHAR, Sys Mgmt Util: M-Z, C-39 
TTY_BUF, Sys Mgmt Util: M-Z, C-89 
TTY_CLASSNAME, Sys Mgmt Util: M-Z, 
C-39 
TTY_DEFCHAR, Sys Mgmt Util: M-Z, C-40 
TTY_DEFCHAR2, Sys Mgmt Util: M-Z, C-40 
TTY_DEFPORT, Sys Mgmt Util: M-Z, C-41 
TTY_DIALTYPE, Sys Mgmt Util: M-Z, C-42 
TTY_DMASIZE, Sys Mgmt Util: M-Z, C-42 
TTY_OWNER, Sys Mgmt Util: M-Z, C-42 
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TTY system parameters (cont'd) 
TTY_PARITY, Sys Mgmt Util: M-Z, C-42 
TTY_PROT, Sys Mgmt Util: M-Z, C-42 
TTY_RSPEED, Sys Mgmt Util: M-Z, C42 
TTY_SCANDELTA, Sys Mgmt Util: M-Z, C-42 
TTY_SILOTIME, Sys Mgmt Util: M-Z, C—43 
TTY_SPEED, Sys Mgmt Util: M-Z, C-43 
TTY_TIMEOUT, Sys Mgmt Util: M-Z, C-43 
TTY_TYPAHDSZ, Sys Mgmt Util: M-Z, C-43 
TURBOchannel 
device on, Sys Mgmt Util: M-Z, 4-30 


U 


UAFALTERNATE system parameter, Sys Mgmt 
Util: M-Z, C-43 
UAFs (user authorization files) 
See also SYSUAF 
UDABURSTRATE system parameter, Sys Mgmt 
Util: M-Z, C43 
UIC-based protection 
See Protection codes 
UICs 
specifying, Sys Mgmt Util: M-Z, 2-29 
UICs (user identification codes) 
for disk quota file, Sys Mgmt Util: M-Z, 5-20 
identifiers, Sys Mgmt Util: A-L, 1-14 
/UNDEFINED_FAT qualifier 
in Mount utility, Sys Mgmt Util: M-Z, 2-36 
UNIBUS I/O addresses, Sys Mgmt Util: M-Z, 
4-31 
Unloading licenses, Sys Mgmt Util: M-Z, 5-42 
/UNLOAD qualifier 
in Mount utility, Sys Mgmt Util: M-Z, 2-37 
Usage count 
updating, Sys Mgmt Util: M-Z, 5-26 
/USAGE qualifier, Sys Mgmt Util: A-L, 3-5, 3-10 
in Analyze/Disk_Structure utility, Sys Mgmt 
Util: A-L, 3-10 
USE command 
in SYSGEN, Sys Mgmt Util: M-Z, 4-33 
User (security category) 
controlling types of access, Sys Mgmt Util: 
A-L, 1-13 
User accounts 
altering, Sys Mgmt Util: A-L, 5-34 
creating, Sys Mgmt Util: A-L, 5-6 
deleting, Sys Mgmt Util: A-L, 5-39 
User directories 
creating for a new account, Sys Mgmt Util: 
A-L, 5-18 
User identification codes 
See UICs 
User names 
as identifiers, Sys Mgmt Util: A-L, 1-14 
identifiers added with, Sys Mgmt Util: A-L, 
5-18 


User names (cont'd) 
specifying with wildcards, Sys Mgmt Util: A-L, 
5-5 
USER system parameters 
USER3, Sys Mgmt Util: M-Z, C-43 
USER4, Sys Mgmt Util: M-Z, C—44 
USERD1, Sys Mgmt Util: M-Z, C-43 
USERD2, Sys Mgmt Util: M-Z, C-43 


V 
VAXCLUSTER system parameter, Sys Mgmt Util: 
M-Z, C-44 
VAXVMSSYS.OLD file, Sys Mgmt Util: A-L, 6-7 
VAXVMSSYS.PAR file, Sys Mgmt Util: A-L, 6-7 
VBS class record 
in Monitor utility, Sys Mgmt Util: M-Z, A-43 
VBSS_ENABLE2 system parameter, Sys Mgmt 
Util: M-Z, C—45 
VBSS_ENABLE system parameter, Sys Mgmt 
Util: M-Z, C-44 
VCC_FLAGS system parameter, Sys Mgmt Util: 
M-Z, C-45 
VCC_MAXSIZE system parameter, Sys Mgmt 
Util: M-Z, C-45 
VECTOR class record 
in Monitor utility, Sys Mgmt Util: M-Z, A-44 
Vector CPU time 
obtaining information regarding processor, Sys 
Mgmt Util: M-Z, A-44 
obtaining information regarding system, Sys 
Mgmt Util: M-Z, A-44 
Vector processing 
monitoring, Sys Mgmt Util: M-Z, 1-60 
Vector quantum adjustment disabling option, Sys 
Mgmt Util: M-Z, C-32 
Vectors 
addresses, Sys Mgmt Util: M-Z, 4-7, 4-9 
fixed space, Sys Mgmt Util: M-Z, D-1 
floating space, Sys Mgmt Util: M-Z, D-1 
VECTOR_MARGIN system parameter, Sys Mgmt 
Util: M-Z, C-46 
VECTOR_PROC system parameter, Sys Mgmt 
Util: M-Z, C-46 
Verification 
of disk volumes, Sys Mgmt Util: A-L, 3-3 
/VERIFY qualifier 
in Backup utility, Sys Mgmt Util: A-L, 7-62 
/VIEWING_TIME qualifier 
in Monitor utility, Sys Mgmt Util: M—Z, 1-13 
VIRTUALPAGECNT system parameter, Sys 
Mgmt Util: M-Z, C-46 
VMS$SYSTEM_IMAGES.IDX 
adding an entry, Sys Mgmt Util: M-Z, 5-73 
removing an entry, Sys Mgmt Util: M-Z, 5-74 
VMS Backup utility 
See Backup utility (BACKUP) 


VMScluster environment 
command execution, Sys Mgmt Util: M-Z, 
5-30 
DCL commands 
interaction with SYSMAN cluster 
commands, Sys Mgmt Util: M-Z, 5-6 
displaying group number, Sys Mgmt Util: 
M-Z, 5-16 
displaying multicast address, Sys Mgmt Util: 
M-Z, 5-16 
displaying network information, Sys Mgmt 
Util: M-Z, 5-16 
displaying system date and time, Sys Mgmt 
Util: M-Z, 5-17 
dual-architecture 
installing images, Sys Mgmt Util: M-Z, 
5-30 
group number, Sys Mgmt Util: M-Z, 5-14 
modifying security data, Sys Mgmt Util: M-Z, 
5-14 
password, Sys Mgmt Util: M-Z, 5-14 
setting time, Sys Mgmt Util: M-Z, 5-15 
updating security data, Sys Mgmt Util: M-Z, 
5-15 
VMSclusters environment 
dual-architecture 
installing images, Sys Mgmt Util: M-Z, 
5-31 
VMSIMAGES.DAT file, Sys Mgmi Util: A—L, 6-6 
/VOLUME qualifier 
in Backup utility, Sys Mgmt Util: A-L, 7~63 
Volume quota file 
See Disk quota 
Volumes 
See also Disk volume 
See also Magnetic tape 
allocating map pointers for file windows, Sys 
Mgmt Util: M-Z, 2-38 
dismounting, Sys Mgmt Util: M-Z, 2-37 
making for group, Sys Mgmt Util: M-Z, 2-20 
mounting, Sys Mgmt Util: M-Z, 2-4 
from a subprocess, Sys Mgmt Util: M-Z, 
2-3 
mounting foreign, Sys Mgmt Util: M-Z, 2-20 
mounting with operator assistance, Sys Mgmt 
Util: M-Z, 2-8 
mounting with shadowing, Sys Mgmt Util: 
M-Z, 2-16, 2-17 
nonstandard format, Sys Mgmt Util: M-Z, 
2-20 
ownership, Sys Mgmt Util: M-Z, 2-35 
protection 
mounting with shadowing, Sys Mgmt Util: 
M-Z, 2-34 
ownership, Sys Mgmt Util: M-Z, 2-29 
processor, Sys Mgmt Util: M-Z, 2-29 
recovery, Sys Mgmt Util: M-Z, 2-32 
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Volumes 
protection (cont'd) 
user quotas, Sys Mgmt Util: M-Z, 2-31 
with MOUNT command, Sys Mgmt Util: 
M-Z, 2-27, 2-30, 2-38 
public 
creating, Sys Mgmt Util: M-Z, 2-35 
repairing errors on a disk volume, Sys Mgmt 
Util: A-L, 3-10 
sharing, Sys Mgmt Util: M-Z, 2-34 
standard ANSI and Files—11 format, Sys Mgmt 
Util: M-Z, 2-28 
write protection, Sys Mgmt Util: M-Z, 2-38 
Volume sets 
adding a volume to, Sys Mgmt Util: M-Z, 2-11 
and MOUNT command, Sys Mgmt Util: M-Z, 
2-5 
creating, Sys Mgmt Util: M-Z, 2-11 
image save operation, Sys Mgmt Util: A-L, 
7-35 
VOTES system parameter, Sys Mgmt Util: M-Z, 
C46 


W 


Wildcard characters, Sys Mgmt Util: A-L, 7-8 
restriction in ACL editor, Sys Mgmt Util: A-L, 
1-4 
using to represent directories, Sys Mgmt Util: 
A-L, 7-8 
Windows 
compressing or expanding, Sys Mgmt Util: 
M-Z, 3-55 
designating, Sys Mgmt Util: M-Z, 3-51 
display SHOW CLUSTER information, Sys 
Mgmt Util: M-Z, 3-3 
moving, Sys Mgmt Util: M-Z, 3-52 
rearranging, Sys Mgmt Util: M-Z, 3-38 
scrolling, Sys Mgmt Util: M-Z, 3-50 
terminating selection, Sys Mgmt Util: M-Z, 
3-36 
viewing large display, Sys Mgmt Util: M-Z, 
3-40 
/WINDOWS qualifier 
in Mount utility, Sys Mgmt Util: M-Z, 2-38 
WINDOW_SYSTEM system parameter, Sys Mgmt 
Util: M-Z, C-46 
Work area 
copying to parameter file, Sys Mgmt Util: 
M-Z, 5-50 
loading parameters, Sys Mgmt Util: M-Z, 5-49 
WPRE_SIZE system parameter, Sys Mgmt Util: 
M-Z, C-47 
WPTTE_SIZE system parameter, Sys Mgmt Util: 
M-Z, C-47 


Index-—36 


WRITABLESYS system parameter, Sys Mgmt 
Util: M-Z, C-52 
WRITE command 
in Show Cluster utility, Sys Mgmt Util: M-Z, 
3-56 
in SYSGEN, Sys Mgmt Util: M-Z, 4-34 
/WRITE qualifier 
in Mount utility, Sys Mgmt Util: M-Z, 2-38 
WRITESYSPARAMS system parameter, Sys 
Mgmt Util: M-Z, C-52 
WSDEC system parameter, Sys Mgmt Util: M-Z, 
C-47 
WSINC system parameter, Sys Mgmt Util: M-Z, 
C-47 
WSMAX system parameter, Sys Mgmt Util: M-Z, 
C-47 
WS_OPAO system parameter, Sys Mgmt Util: 
M-Z, C-47 


X 


XFMAXRATE system parameter, Sys Mgmt Util: 
M-Z, C-48 

XQPCTLD1 system parameter, Sys Mgmt Util: 
M-Z, C-52 

XQPCTLD2 system parameter, Sys Mgmt Util: 
M-Z, C-52 


Z 


ZERO COUNTERS command 
in LATCP, Sys Mgmt Util: A-L, 11-52 
ZERO_LIST_HI system parameter, Sys Mgmt 
Util: M-Z, C-48 


How to Order Additional Documentation 





Technical Support 
If you need help deciding which documentation best meets your needs, call 800-DIGITAL (800-344-4825) 
and press 2 for technical assistance. 


Electronic Orders 


If you wish to place an order through your account at the Electronic Store, dial 800-234-1998, using a 
modem set to 2400- or 9600-baud. You must be using a VT terminal or terminal emulator set at 8 bits, no 
parity. If you need assistance using the Electronic Store, call 800-DIGITAL (800-344-4825) and ask for an 
Electronic Store specialist. 


Telephone and Direct Mail Orders 


From 
U.S.A. 


Puerto Rico 


Canada 


International 


Internal Orders? 


(for software 
documentation) 


Internal Orders 
(for hardware 
documentation) 


Call 


DECdirect 

Phone: 800-DIGITAL 
(800-344-4825) 

FAX: (603) 884-5597 


Phone: (809) 781-0505 
FAX: (809) 749-8377 


Phone: 800-267-6215 
FAX: (613) 592-1946 


DTN: 241-3023 
(508) 874-3023 


DTN: 234-4325 
(508) 351-4325 
FAX: (508) 351-4467 


Write 


Digital Equipment Corporation 
P.O. Box CS2008 
Nashua, NH 03061 


Digital Equipment Caribbean, Inc. 
3 Digital Plaza, 1st Street 

Suite 200 

Metro Office Park 

San Juan, Puerto Rico 00920 


Digital Equipment of Canada Ltd. 
100 Herzberg Road 

Kanata, Ontario, Canada K2K 2A6 
Attn: DECdirect Sales 


Local Digital subsidiary or 
approved distributor 


Software Supply Business (SSB) 
Digital Equipment Corporation 
1 Digital Drive 

Westminster, MA 01473 


Publishing & Circulation Services 
Digital Equipment Corporation 
NR02-2 

444 Whitney Street 

Northboro, MA 01532 


1Call to request an Internal Software Order Form (EN—01740-07). 
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Page layout (easy to find information) C] CO O O 


I would like to see more/less 


What I like best about this manual is 


What I like least about this manual is 


I found the following errors in this manual: 


Page Description 








Additional comments or suggestions to improve this manual: 


For software manuals, please indicate which version of the software you are using: 


Name/Title CdD ep tz. 
CTIA ANN i ee ee (Dat 
Mailing Address 

Phone 


Do Not Tear — Fold Here and Tape 


dlilgli|tlal 


No Postage 
Necessary 


if Mailed 
in the 
United States 





BUSINESS REPLY MAIL 


FIRST CLASS PERMIT NO. 33 MAYNARD MASS. 





POSTAGE WILL BE PAID BY ADDRESSEE 


DIGITAL EQUIPMENT CORPORATION 








OpenVMS Documentation 
110 SPIT BROOK ROAD ZKO3-—4/U08 
NASHUA, NH 03062-2642 


Do Not Tear —- Fold Here 


